Storm-2460

Also reported as Lumma Stealer.

Reports: 1
Last reported: 8 April 2025
Known CVEs: 3

ID: storm-2460
Sources: MISP Malpedia Microsoft
Merge evidence: 2 alias matches

Reports per quarter

2025 Q2: 1 report

Dated reports, 2025 Q2 to 2025 Q2.

CVEs named in reports

CVE-2025-24983 KEV
CVE-2025-29814
CVE-2025-29824 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

8 April 2025

Exploitation of CLFS zero-day leads to ransomware activity | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exploitation of CLFS zero-day leads to ransomware activity | Microsoft Security Blog

Newest first. Details opens the report in Explore.