ETHSecurity Community

Sharing some Lumma info-stealer malicious captcha instances to avoid. Instances initially reported by @banthisguy9349 on X

credit:

Fake Captcha that we have observed by #Lummastealer 

has now been found luring victims to execute a powershell script with a malicious .mp4

IOC's:
hxxps://sos-de-fra-1.exo.io/sandisk/security-checkpost-v2.html

Malware url:
kliphuqibue[.]shop/data. mp4
https://t.co/u7JaKr4irC https://t.co/L9Zhe4gFep

Fox_threatintel

Sharing some Lumma info-stealer malicious captcha instances to avoid. Instances initially reported by @banthisguy9349 on X

credit: https://x.com/banthisguy9349/status/1866393258789933389

https://github.com/cipher-rc5/untitled-folder/blob/main/lumma_stealer_fake_captcha.md