SecurityThe Hacker Newsabout 2 hours ago
100+ Sites Use Fake Cloudflare Checks
3 min read
CERT-UA identified over 100 compromised websites in September 2026 using the UAC-0277 cluster to deploy LunexStealer malware. The attacks utilize a ClickFix technique with fake verification pages that trick Windows users into installing malicious MSI packages or browser extensions, potentially stealing credentials and controlling browsers.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyCloudflare