Hackers are targeting cryptocurrency users by deploying fake Windows 11 update ads on Facebook, according to Cryptopolitan. These ads, which mimic professional Microsoft branding, redirect users to counterfeit Microsoft websites where malicious software is downloaded. The malware installs a framework known as "LunarApplication" on victims' computers, designed to extract cryptocurrency wallet seed phrases, login credentials, and other sensitive data. To evade detection, the hackers employ geofencing techniques that bypass data center IP addresses, making it difficult for automated scanners to identify the threat. This sophisticated attack highlights the ongoing risks faced by cryptocurrency users and the need for heightened vigilance against phishing schemes.