Lunex is a sophisticated information stealer malware targeting Ukrainian-speaking users via fake CAPTCHA pages. It uses a four-stage attack chain and employs Bring Your Own Vulnerable Driver (BYOVD) techniques with AMD's PDFWKRNL.sys to disable kernel-level security monitoring. The malware targets seven Chromium-based browsers to extract credentials and cryptocurrency wallets, maintaining persistence through PowerShell-based Chrome Native Messaging Hosts. It operates a large command-and-control infrastructure across multiple countries and is run by a financially motivated threat actor from the CIS region as a Malware-as-a-Service platform.