Malwarebytes' latest report shows that hackers are targeting crypto users by running fake Windows 11 update ads on Facebook to launch attacks and steal assets. Victims who click on the ads are directed to a cloned Microsoft website, where hackers use geofencing technology to deliver malicious installers to targeted users. The malware runs in a folder named “LunarApplication” to disguise its legitimacy, then steals sensitive information such as users' crypto wallet files, seed phrases, saved passwords, and browser sessions. Additionally, information-stealing malware has affected millions of devices in 2025, stealing approximately 1.8 billion credentials. (Cryptopolitan)