Lumma Stealer
LummaC2 StealerLummaStealer
Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA)… Fuente: MISP
Actividad en Jábega · 12 semanas
1 noticias · vista por primera vez el 21 oct 2026 · la última, el 21 oct 2026
Noticias
- Decades-Old Windows Utility Powers Modern ClickFix AttackDark Reading · 21 oct 2026
Técnicas MITRE ATT&CK
Acceso inicial
T1195Supply Chain Compromise 19 reglas SigmaT1566.001Spearphishing Attachment 21 reglas SigmaT1566.002Spearphishing Link 3 reglas Sigma
Ejecución
T1059.001PowerShell 40 reglas SigmaT1059.006Python 10 reglas SigmaT1059.010AutoHotKey & AutoITT1204User Execution 49 reglas SigmaT1204.002Malicious File 32 reglas SigmaT1574.001DLL 40 reglas Sigma
Persistencia
T1176.001Browser Extensions 2 reglas SigmaT1547.001Registry Run Keys / Startup Folder 38 reglas Sigma
Escalada de privilegios
Acceso a credenciales
Descubrimiento
T1082System Information Discovery 18 reglas SigmaT1217Browser Information DiscoveryT1497.001System Checks 3 reglas SigmaT1518.001Security Software Discovery 5 reglas SigmaT1622Debugger Evasion 1 reglas Sigma
Recopilación
T1074.001Local Data Staging 4 reglas SigmaT1113Screen Capture 6 reglas SigmaT1119Automated Collection 5 reglas Sigma
Mando y control
Exfiltración
Stealth
T1027Obfuscated Files or Information 61 reglas SigmaT1027.013Encrypted/Encoded FileT1036.008Masquerade File TypeT1140Deobfuscate/Decode Files or Information 17 reglas SigmaT1218.005Mshta 8 reglas SigmaT1218.015Electron ApplicationsT1564.003Hidden Window 7 reglas SigmaT1620Reflective Code Loading 3 reglas Sigma
Defense impairment
Relaciones por coaparición en noticias, no atribución. Fuentes: MISP galaxy, MITRE ATT&CK y SigmaHQ. attack.mitre.org ↗ malpedia.caad.fkie.fraunhofer.de ↗