Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

A new threat has emerged in the cybersecurity landscape, as a malware variant known as Lunex Stealer is exploiting a vulnerability in AMD graphics drivers to evade detection and steal sensitive information. The malware’s tactics are particularly concerning, as they allow it to disable security monitoring tools and pilfer browser credentials with ease.

Lunex Stealer’s reliance on an AMD driver weakness highlights the often-overlooked intersection of hardware and software security. In this case, the malware utilizes a vulnerability in AMD’s graphics drivers to inject itself into the system’s kernel, effectively giving it root-level access. This allows Lunex Stealer to bypass traditional security measures, including anti-virus software and host-based intrusion detection systems.

The malware’s primary goal is to compromise browser credentials, which can grant unauthorized access to sensitive online accounts. By targeting AMD drivers, Lunex Stealer creates a backdoor that enables it to persist on the system even after reboots or other attempts to remove it. This persistence mechanism makes it challenging for security teams to detect and eradicate the malware.

The widespread availability of AMD graphics cards means that virtually any user who has installed an AMD driver is potentially vulnerable to this attack. Furthermore, the fact that Lunex Stealer can disable security monitoring tools suggests a level of sophistication that could make it difficult for users to defend against. The implications are significant, as compromised browser credentials can be used to spread malware further or enable other types of cyber attacks.

While AMD has not publicly commented on the vulnerability exploited by Lunex Stealer, it is clear that this threat highlights the need for greater collaboration between hardware and software vendors in addressing security vulnerabilities. As users continue to rely on increasingly complex systems, the importance of robust security measures cannot be overstated.

For those affected by this malware variant, taking steps to secure browser credentials and regularly update AMD drivers can help mitigate risks. Users should also remain vigilant about monitoring their system’s performance for any unusual activity or signs of unauthorized access. By staying informed and proactive, individuals can better protect themselves against the evolving threat landscape.


Source: The Hacker News — 2026-09-26