Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

2026-09-26T19:23:59Z•7a7c1902f6bae244ef5f3cc2b8ec1ec266a759ba125a4265ecce20ad60f16ba4
CVE-2026-35273CVE-2026-48842CVE-2026-5430CVE-2026-65660CVE-2026-87902AI securityAdobe CommerceAndroid spywareCISA KEVClickFixGitHub ActionsMicrosoft SharePointMikroTik RouterOSOracle PeopleSoftRoundcubeTerraformWSO2WordPressactive exploitationcloud data exposurecredential theftcritical vulnerabilitiescryptocurrency theftinformation stealermacOS malwaremalware-as-a-serviceremote code executionsupply-chain compromiseweb shells

What happened

The feed reports widespread active exploitation of critical vulnerabilities, malware campaigns, supply-chain compromises, credential theft, and abuse of trusted services. Key incidents include exploitation of Oracle PeopleSoft, Microsoft SharePoint, MikroTik RouterOS, Roundcube, WSO2, Adobe Commerce, and WordPress flaws; ClickFix campaigns delivering Psychedelic/Lunex Stealer; Android and macOS spyware; compromised GitHub Actions and malicious Terraform providers; cloud data exposure; and major account or cryptocurrency compromises. Several vulnerabilities are listed as actively exploited or C

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
7a7c1902f6bae244ef5f3cc2b8ec1ec266a759ba125a4265ecce20ad60f16ba4
Enrichment time
2026-09-26T19:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.