International law enforcement agencies have disrupted the Lumma Stealer malware operation, seizing 2,300 domains used as command-and-control infrastructure. This Russian-developed information stealer infected approximately 10 million Windows computers globally, stealing browser data, crede...
A global malware campaign using fake CAPTCHA verification systems to spread the Lumma information stealer has been discovered, targeting multiple countries and industries. The attack tricks users into executing malicious commands through Windows Run, deploying PowerShell scripts that bypas...
A large-scale phishing campaign using nearly 1,000 fake Reddit and WeTransfer pages has been discovered distributing Lumma Stealer malware. The attack uses fake Reddit discussions with WeTransfer links to lure victims to malicious sites, where the information-stealing malware is deployed t...
A large-scale malvertising campaign dubbed "DeceptionAds" is distributing Lumma Stealer malware through fake CAPTCHA pages, generating over 1M daily ad impressions across 3,000 websites. The attack tricks users into copying malicious PowerShell commands disguised as CAPTCHA solutions, lead...
