Angry Likho

Bifrost Burned: Dissecting Asgard Protector’s Defenses

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Bifrost Burned: Dissecting Asgard Protector’s Defenses

GhostSocks: From Initial Access to Residential Proxy

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GhostSocks: From Initial Access to Residential Proxy

Bulletproof Hosting Hunt

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Bulletproof Hosting Hunt

Lumma Stealer — A Proliferating Threat in the Cybercrime Landscape

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Lumma Stealer — A Proliferating Threat in the Cybercrime Landscape

Lumma Stealer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Lumma Stealer

Cyber%20Threat%20Intelligence%20Report%202025.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber%20Threat%20Intelligence%20Report%202025.pdf

A Wretch Client: From ClickFix deception to information stealer deployment

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Wretch Client: From ClickFix deception to information stealer deployment

Disrupting Lumma Stealer: Microsoft leads global action against favored cybercrime tool

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Disrupting Lumma Stealer: Microsoft leads global action against favored cybercrime tool

Europol and Microsoft disrupt world’s largest infostealer Lumma

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Europol and Microsoft disrupt world’s largest infostealer Lumma

Finding Malware: Unveiling LUMMAC.V2 with Google Security Operations - Part 1

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Finding Malware: Unveiling LUMMAC.V2 with Google Security Operations - Part 1

Interlock ransomware evolving under the radar

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Interlock ransomware evolving under the radar

CyberSOC Insights: Analyse einer BlackBasta Angriffskampagne

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CyberSOC Insights: Analyse einer BlackBasta Angriffskampagne

Back to Business: Lumma Stealer Returns with Stealthier Methods

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Back to Business: Lumma Stealer Returns with Stealthier Methods

Lumma Stealer - A tale that starts with a fake Captcha - Vital Digital Forensics

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Lumma Stealer - A tale that starts with a fake Captcha - Vital Digital Forensics

ClickFix: The Social Engineering Technique Hackers Use to Manipulate Victims

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ClickFix: The Social Engineering Technique Hackers Use to Manipulate Victims

2025ThreatDetectionReport_RedCanary.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2025ThreatDetectionReport_RedCanary.pdf

AI Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AI Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution

Angry Likho: Old beasts in a new forest

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Angry Likho: Old beasts in a new forest

GhostSocks - Lumma's Partner In Proxy - Codexa – Premium Developer Automation Template

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GhostSocks - Lumma's Partner In Proxy - Codexa – Premium Developer Automation Template

An Update on Fake Updates: Two New Actors, and New Mac Malware | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor An Update on Fake Updates: Two New Actors, and New Mac Malware | Proofpoint US

Malvertisements, Fake Captchas and Infostealers

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malvertisements, Fake Captchas and Infostealers

One ClickFix and LummaStealer reCAPTCHA’s Our Attention - Part 1

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor One ClickFix and LummaStealer reCAPTCHA’s Our Attention - Part 1

Lumma Stealer: Fake CAPTCHAs & New Techniques to Evade Detection

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Lumma Stealer: Fake CAPTCHAs & New Techniques to Evade Detection

F.A.C.C.T. обнаружил новые атаки проукраинских кибершпионов Sticky Werewolf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor F.A.C.C.T. обнаружил новые атаки проукраинских кибершпионов Sticky Werewolf

Analisi di una campagna Lumma Stealer con falso CAPTCHA condotta attraverso domino italiano compromesso

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analisi di una campagna Lumma Stealer con falso CAPTCHA condotta attraverso domino italiano compromesso

TLP-CLEAR-CryptBot-Hunting-for-intial-access-vectors.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor TLP-CLEAR-CryptBot-Hunting-for-intial-access-vectors.pdf

Lumma 2024: Dominating the Info-Stealer Market

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Lumma 2024: Dominating the Info-Stealer Market

Deobfuscation of Lumma Stealer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Deobfuscation of Lumma Stealer

LummaC2 Revisited: What’s Making this Stealer Stealthier and More Lethal

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LummaC2 Revisited: What’s Making this Stealer Stealthier and More Lethal

Your Data Is Under New Lummanagement: The Rise of LummaStealer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Your Data Is Under New Lummanagement: The Rise of LummaStealer

“DeceptionAds” — Fake Captcha Driving Infostealer Infections and a Glimpse to the Dark Side of Internet Advertising

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor “DeceptionAds” — Fake Captcha Driving Infostealer Infections and a Glimpse to the Dark Side of Internet Advertising

ClickFix Malware & Social Engineering Threat Grows | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ClickFix Malware & Social Engineering Threat Grows | Proofpoint US

LUMMASTEALER Delivered Via PowerShell Social Engineering

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LUMMASTEALER Delivered Via PowerShell Social Engineering

Correlating Vidar Stealer Build IDs Based on Loader Tasks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Correlating Vidar Stealer Build IDs Based on Loader Tasks

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/pronsis-loader-a-jphp-driven-malware-diverging-from-d3fck-loader/

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/pronsis-loader-a-jphp-driven-malware-diverging-from-d3fck-loader/

Malware Analysis - Lumma Stealer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Analysis - Lumma Stealer

Malware Analysis - Lumma Stealer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Analysis - Lumma Stealer

Dissecting Lumma Malware: Analyzing the Fake CAPTCHA and Obfuscation Techniques - Part 2

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Dissecting Lumma Malware: Analyzing the Fake CAPTCHA and Obfuscation Techniques - Part 2

Anatomy of a Lumma Stealer Attack via Fake CAPTCHA Pages - Part 1

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Anatomy of a Lumma Stealer Attack via Fake CAPTCHA Pages - Part 1

PEAKLIGHT: Decoding the Stealthy Memory-Only Malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor PEAKLIGHT: Decoding the Stealthy Memory-Only Malware

Ongoing Social Engineering Campaign Refreshes Payloads

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ongoing Social Engineering Campaign Refreshes Payloads

Stargazers Ghost Network - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Stargazers Ghost Network - Check Point Research

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed | FortiGuard Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exploiting CVE-2024-21412: A Stealer Campaign Unleashed | FortiGuard Labs

A Beginner's Guide to Hunting Malicious Open Directories - Censys

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Beginner's Guide to Hunting Malicious Open Directories - Censys

Exposing FakeBat loader: distribution methods and adversary infrastructure

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exposing FakeBat loader: distribution methods and adversary infrastructure

[0001] AmberAmethystDaisy -> QuartzBegonia -> LummaStealer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor [0001] AmberAmethystDaisy -> QuartzBegonia -> LummaStealer

Clipboard to Compromise: PowerShell Script Self-Pwn | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Clipboard to Compromise: PowerShell Script Self-Pwn | Proofpoint US

UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion

Howling at the Inbox: Sticky Werewolf's Latest Malicious Aviation Attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Howling at the Inbox: Sticky Werewolf's Latest Malicious Aviation Attacks

Fake Browser Updates delivering BitRAT and Lumma Stealer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Fake Browser Updates delivering BitRAT and Lumma Stealer

Understanding API Hashing and build a rainbow table for LummaStealer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Understanding API Hashing and build a rainbow table for LummaStealer

A Deep Dive Into Malicious Direct Syscall Detection - Palo Alto Networks Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Deep Dive Into Malicious Direct Syscall Detection - Palo Alto Networks Blog

Lumma Stealer: Advanced Threat Analysis & Protection Guide 2026

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Lumma Stealer: Advanced Threat Analysis & Protection Guide 2026

Understanding PEB and LDR Structures using IDA and LummaStealer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Understanding PEB and LDR Structures using IDA and LummaStealer

CrackedCantil: Malware Work Together

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CrackedCantil: Malware Work Together

Q4%202023%20Botnet%20Threat%20Update.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Q4%202023%20Botnet%20Threat%20Update.pdf

Deceptive Cracked Software Spreads Lumma Variant on YouTube | FortiGuard Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Deceptive Cracked Software Spreads Lumma Variant on YouTube | FortiGuard Labs

Analyzing LummaC2 stealer’s novel Anti-Sandbox technique: Leveraging trigonometry for human behavior detection

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analyzing LummaC2 stealer’s novel Anti-Sandbox technique: Leveraging trigonometry for human behavior detection

Approaching stealers devs : a brief interview with LummaC2

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Approaching stealers devs : a brief interview with LummaC2

GHOSTPULSE haunts victims using defense evasion bag o' tricks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GHOSTPULSE haunts victims using defense evasion bag o' tricks

Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction | Microsoft Security Blog

Lumma Stealer actively deployed in multiple campaigns

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Lumma Stealer actively deployed in multiple campaigns

Исследование атак на госорганы с применением коммерчески доступного ПО

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Исследование атак на госорганы с применением коммерчески доступного ПО

The Case of LummaC2 v4.0

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Case of LummaC2 v4.0

The Rise of MaaS & Lumma Info Stealer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Rise of MaaS & Lumma Info Stealer

Fake Update Utilizes New IDAT Loader To Execute StealC and Lumma Infostealers | Rapid7 Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Fake Update Utilizes New IDAT Loader To Execute StealC and Lumma Infostealers | Rapid7 Blog

LummaC2 stealer: Everything you need to know

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LummaC2 stealer: Everything you need to know

Lumma Stealer targets YouTubers via Spear-phishing Email

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Lumma Stealer targets YouTubers via Spear-phishing Email

Threat Actors Abuse AI-Generated Youtube Videos to Spread Stealer Malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Actors Abuse AI-Generated Youtube Videos to Spread Stealer Malware

LummaC2 Stealer: Major Threat to Crypto Users' Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LummaC2 Stealer: Major Threat to Crypto Users' Security