MALWARE-OTHER Win.Malware.Lumma variant download attempt

Stats

First seen: January 2024
Last seen: October 2026

Description

Detects payload download activity associated with Win.Malware.Lumma, a Windows malware family.

Related malware families

Related blogs

$Sandbox process tree for the Underground loader, showing an injected dllhost.exe launching chrome.exe and msedge.exe and staging stolen cookies under C:\ProgramData\Underground, before a second dllhost.exe deletes that folder.$

$100k in Crypto Drained by the Underground Operation

October 1, 20268 min read

From ClickFix to MaaS: Exposing a Modular Windows RAT and Its Admin Panel

April 6, 20268 min read

OpenClaw Trap: AI-Assisted Lure Factory Targets Developers & Gamers

March 23, 202613 min read

PureHVNC RAT Using Fake High-level Job Offers from Fashion and Beauty Brands

May 28, 20257 min read

New Evasive Campaign Delivers LegionLoader via Fake CAPTCHA & CloudFlare Turnstile

April 4, 20258 min read

Fake CAPTCHAs, Malicious PDFs, SEO Traps Leveraged for User Manual Searches

February 27, 20253 min read

Lumma Stealer: Fake CAPTCHAs & New Techniques to Evade Detection

January 23, 20255 min read