Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
Ontinue details LunexStealer MaaS using BYOVD with AMD's PDFWKRNL.sys (CVE-2023-20598) to blind EDR before stealing credentials and crypto wallets.
55
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 26, 2026
- Last mentionedSep 26, 2026
Timeline
1 articles · newest firstRelated CVEs
by mentions- CVE-2023-20598<1%7.8An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over…
Appears with
- Ontinueorganization · 1
- Arctic Wolf Labsorganization · 1
- Psychedelic Stealermalware · 1
- AMDorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.