CyberNew CyberNew
Ransomware & Malware The Record 1 week ago

ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: MEDIUM
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Ransomware & Malware

Analyst Takeaway

"Image: Planet Volumes via Unsplash ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware Hackers compromised more than 100 websites to infect Ukrainian users with information-stealing malware, according to a new report. Ukraine's computer emergency response team, CERT-UA, said the campaign, discovered in September, involved attackers injecting malicious code into..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
cursor
Image: Planet Volumes via Unsplash

ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware

Hackers compromised more than 100 websites to infect Ukrainian users with information-stealing malware, according to a new report.

Ukraine's computer emergency response team, CERT-UA, said the campaign, discovered in September, involved attackers injecting malicious code into legitimate websites. Visitors to those sites were shown a fake Cloudflare verification page that told them to copy and run a command in PowerShell, a Windows command-line tool, to prove they were human.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →