Back to all incidents

Cloudflare

cloudflare.com
DEVELOPING

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which desc...

Observable Status DEVELOPING
Industry / Sector Technology & Commercial
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor Unattributed / Unknown
Affected Population Scope Under Audit
First Seen 2026-09-26
Last Updated 2026-09-26
Authentication Credentials
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

39% CONFIDENCE
1. Primary Authority INDEPENDENT VERIFICATION Base weight: 32%
2. Evidence Specificity +7% Domain & Scope Telemetry
3. Corroboration Curve +0% 1 independent domain
4. Timeline & Staleness +0% 1 milestone logged
Corroborated Source Domains:
thehackernews.com

Technical Forensic Briefing

Incident Overview

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which desc...

This security event involves Cloudflare (cloudflare.com), categorized under Technology & Commercial. Observable incident classification indicates Network Intrusion & Data Exfiltration.

Compromised Assets & Data Scope

Forensic telemetry identifies exposure across: Authentication Credentials. Quantified victim population has not yet been formally disclosed in public filings.

Statutory Disclosures & Compliance

No formal federal or state regulatory filings have been confirmed at this time.

Milestone Timeline (1 events logged)

2026-09-26 18:22 UTC
INDEPENDENT VERIFICATION

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub