Threat Intelligence26 September 2026
Lunex Stealer: BYOVD With an AMD Driver Blinds EDR, Then Steals Credentials
Ontinue's analysis of the Lunex malware-as-a-service platform shows a four-stage chain that starts with a fake CAPTCHA and uses a vulnerable AMD driver to neutralise endpoint security without killing it.
infostealerbyovdclickfix
3 min readRead
Threat Intelligence19 August 2026
MacSync Stealer: Microsoft Traces macOS Malware Through 30+ Rotating Domains
Microsoft Defender Experts mapped MacSync Stealer's infrastructure not by blocklisting domains, but by fingerprinting the behavior behind them — a lesson for anyone still treating IOC feeds as a detection strategy.
macos-securityinfostealerthreat-intelligence
4 min readRead