OTX Threat: Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

A sophisticated four-stage attack chain delivers the Lunex information stealer to Ukrainian-speaking users through fake CAPTCHA pages. The malware employs Bring Your Own Vulnerable Driver (BYOVD) techniques using AMD's PDFWKRNL.sys to disable kernel-level security monitoring before deploying the final payload. The stealer targets seven Chromium-based browsers, extracts credentials using custom SQL CVEs: CVE-2023-20598