Back Ground.News

Hackers Have Breached More than 100 Websites in Ukraine to Steal Passwords and User Data

Ground.News • October 7, 2026

Hackers Hacked More than a Hundred Websites to Spread Viruses, — State Special Communications

When visiting a compromised site, the user is shown a fake Cloudflare verification page, after which malware is installed on the computer.

Hackers have breached more than 100 websites in Ukraine to steal passwords and user data, - State Special Communications Service

In September, CERT-UA experts identified over 100 compromised websites through which hackers were distributing malware. Once a system is infected, the attackers can steal usernames, passwords, and browsing history, as well as remotely control the victim’s computer.

ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware

CERT-UA found fake Cloudflare verification pages that led visitors into a now-familiar ClickFix trap. This time the goal was to infect machines with an infostealer.

More than 100 Sites Infected in Ukraine: the Population Was Warned a Dangerous Scheme

Ukraine found more than 100 hacked websites showing Windows users fake “I'm not a robot” verification and offered via Win+R, CMD

Hacker Attack on Ukrainian Sites: More than 100 Resources Hacked, Recommendations for Protection Against Viruses

⚠️ Caution, Ukrainians! A new wave of cyber threats has taken over popular sites where dangerous viruses hide under the guise of checking “I'm not a robot”. 🦠 Don't give scammers a chance — keep your data safe! 🔒

Hackers Hack More than 100 Websites in Ukraine and Disguise Viruses as “I'm Not a Robot” Check

Large-scale cyberattack in Ukraine: hackers hacked more than 100 websites and spread viruses through fake checks I am not a robot - how to protect yourself tsn.ua (news 1+1).

100 % of the sources lean Left

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LunexStealer Malware Campaign Compromises 100+ Ukrainian Websites In September 2026, Ukraine's CERT-UA identified over 100 compromised websites used to distribute LunexStealer malware. The attackers injected malicious JavaScript into legitimate sites, prompting users to execute commands under the guise of a Cloudflare verification page. This ClickFix technique led to the installation of LunexStealer, which can steal sensitive information and provide remote access to attackers. The malware also installs a browser extension, LunarAxe, disguised as 'Microsoft Office Word Editor,' allowing extensive control over victims' browsers. CERT-UA has not disclosed the identities of the victims or the extent of the infections. The operation is tracked under the identifier UAC-0277, but no known hacking group has been attributed to it. The campaign highlights a growing trend of using social engineering to exploit users directly. 10 sources 67

Extracted Entities

Hackers Have Breached More than 100 Websites in Ukraine to Steal Passwords and User Data

The full story

Extracted Entities

Attack Types (2)

Countries (1)

CWE Weaknesses (1)

Domains (1)

Malware (2)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)