Hackers compromised 100+ websites with fake Cloudflare checks to spread LUNEXSTEALER, stealing data and enabling remote commands.