Lunar Spider Expands their Web via FakeCaptcha – NVISO Labs

Lunar Spider is leveraging compromised European websites with CORS vulnerabilities to deploy a sophisticated FakeCaptcha framework, enabling initial access and victim monitoring that leads to stealthy delivery of Latrodectus V2 malware and facilitates ransomware operations.