Tagged: Lunar Spider

October 6, 2025

Lunar Spider Campaign: FakeCAPTCHA Used to Exploit CORS Flaws and Deliver Latrodectus Loader

The group Lunar Spider—also known under the aliases Gold SwathMore and Elara—has ramped up a new malicious campaign that leverages a counterfeit CAPTCHA verification interface to infect victims’ devices. The primary vector is the...

Cybercriminals

October 2, 2025

Lunar Spider Campaign: Single Click Leads to Two-Month Intrusion and Domain Admin Theft

A cybercriminal group known as Lunar Spider executed a sprawling operation that began with a single click on a bogus file and culminated in weeks of sustained control over the victim’s infrastructure. According to...