According to Crypto界网, reports from Cryptopolitan indicate that hackers are stealing cryptocurrency users' assets by running fake Windows 11 update ads on Facebook. These ads use professional Microsoft branding to lure users into clicking, which then directs them to a cloned Microsoft website, where malicious software is downloaded. This malware installs a framework called "LunarApplication" on the victim's computer, specifically designed to steal cryptocurrency wallet seed phrases, login credentials, and other sensitive information. The hackers utilize geofencing technology to avoid detection by automated scanners by bypassing data center IP addresses.