KongTuke

A cybercriminal malware-distribution cluster that compromises websites and uses fake CAPTCHA or ClickFix instructions to make users run malicious commands. Its traffic and payload chains have delivered information stealers and remote-access tools, including Lumma-related malware.