Ein neuer Information Stealer ist Teil einer vierstufigen Angriffskette der MaaS-Plattform Lunex. Das Ontinue Cyber Defence Centre hat die zugrunde liegenden Binärdateien analysiert. Besonders auffällig ist der Einsatz eines verwundbaren AMD-Treibers.

In its latest threat intelligence report, Ontinue found that attackers are increasingly using trusted workplace tools to trick users into giving them access to enterprise networks.

In its latest threat intelligence report, Ontinue found that attackers are increasingly using trusted workplace tools to trick users into giving them access to enterprise networks.

Ontinue has clinched the Trailblazing Managed XDR Security award at the 2026 InfoSec Innovator Awards, showcasing its innovative Agentic SOC approach.

Vermeintlich vertrauenswürdige Plattformen wie Microsoft Teams werden je länger, je mehr von Cyberkriminellen für Angriffe auf Unternehmensinfrastrukturen missbraucht.

Ontinueの2026年上半期脅威レポートによると、攻撃者はMicrosoft Teams、npmパッケージ、デバイスコード認証、ブロックチェーンを使ったClickFixの手口をますます悪用し、アクセス権の窃取やマルウェアの拡散を進めています。AuditSecurity Ontinueの「2026年上半期脅威インテ

Ontinue’s latest report reveals alarming statistics on fake IT support impersonation attempts via Microsoft Teams, affecting nearly a third of organizations.

New Add-On Service Extends ION MXDR Beyond the Enterprise Perimeter to Identify Exposed Credentials, Brand Impersonation, and Emerging Risks Before They Become Security Incidents Ontinue, a leading…

Ontinue has announced the launch of ION for Dark Web Monitoring (DWM), a new managed add-on service that extends ION MXDR to continuously identify exposed credentials, detect brand impersonation attempts, and uncover emerging external threats before attackers can exploit them. Compromised credentials are traded across criminal forums, lookalike domains are created to impersonate trusted brands, and sensitive information can surface across deep and dark web sources long before security teams become aware of the exposure. …

Ontinue has introduced ION for Dark Web Monitoring, enhancing security operations by identifying exposed credentials and preventing potential threats.

Ontinueは、ION MXDRを拡張する新たなマネージド型アドオンサービス「ION for Dark Web Monitoring（DWM）」の提供開始を発表しました。このサービスは、漏えいした認証情報やブランドなりすましの試みを継続的に特定し、攻撃者に悪用される前に新たな外部脅威を検出します。

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.

Quorum Cyber und Ontinue wollen sich zusammenschließen. Die geplante Übernahme soll Managed Detection and Response, agentenbasierte Security Operations und Incident Response verbinden. Der Abschluss steht noch unter Bedingungen; Finanzdetails bleiben offen.

Lunex uses BYOVD to disable kernel security callbacks before stealing browser credentials and cryptocurrency wallets.

Die Sicherheitsfirma Ontinue hat eine Analyse veröffentlicht, wonach die Malware-as-a-Service-Plattform Lunex Stealer, auch bekannt als Psychedelic Stealer, eine Schwachstelle im AMD-Radeon-Grafiktreiber ausnutzt, um Schutzsoftware auf infizierten Systemen wirkungslos zu machen.Wie Ontinue laut einem Bericht vom 27. September 2026 darlegte, missbraucht die Schadsoftware den Treiber PDFWKRNL.sys über die als CVE-2023-20598 katalogisierte Lücke im sogenannten Bring-Your-Own-Vulnerable-Driver-Verfahren (BYOVD). […] The post Lunex Stealer: AMD-Treiber hebelt Schutzsoftware trotz Sperrliste aus appeared first on BornCity.

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed at targeting Ukrainian-speaking users. "The attack chain begins with a fake CAPTCHA page and

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed at targeting Ukrainian-speaking users. "The attack chain begins with a fake CAPTCHA page and

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed at targeting Ukrainian-speaking users. "The attack chain begins with a fake CAPTCHA page and

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.