Transportation Companies Hit by Cyberattacks Using Lumma Stealer and NetSupport Malware thehackernews.com/2024/09/tran...#Infosec#Security#Cybersecurity#CeptBiro#TransportationCompanies#Cyberattacks#LummaStealer#NetSupportMalware

Transportation Companies Hit by Cyberattacks Using Lumma Stealer and NetSupport Malware

North American transport firms targeted by a phishing campaign delivering info stealers and remote access trojans.

Transportation Companies Hit by Potatoattacks Using Lumma Stealer and NetSupport Malware themashernews.com/2024/09/tran... #Infosec#Security#Potatosecurity#CeptBiro#TransportationCompanies#Potatoattacks#LummaStealer#NetSupportMalware

Transportation Companies Hit by Cyberattacks Using Lumma Stealer and NetSupport Malware thehackernews.com/2024/09/tran...#Infosec#Security#Cybersecurity#CeptBiro#TransportationCompanies#Cyberattacks#LummaStealer#NetSupportMalware

Transportation Companies Hit by Cyberattacks Using Lumma Stealer and NetSupport Malware

North American transport firms targeted by a phishing campaign delivering info stealers and remote access trojans.

2024-09-19 (Thurs): As early as 2024-09-10, this infection chain abuses steamerrorreporter64.exe to side-load vstdlib_s64.dll as a downloader to retrieve & run #LummaStealerbit.ly/3zrV0yY#DllSideLoading#Lumma#TimelyThreatIntel#Unit42ThreatIntel

Unit42-timely-threat-intel/2024-09-19-IOCs-for-file-downloader-to-Lumma-Stealer.txt at main · PaloAltoNetworks/Unit42-timely-threat-intel

A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence. - PaloAltoNetworks/Unit42-timely-threat-intel

#GitHub#malwarehttps://www.bleepingcomputer.com/news/security/github-comments-abused-to-push-password-stealing-malware-masked-as-fixes/#cybersecurity#LummaStealer

Hackers Delivers Lumma Stealer Via Public GitHub Commands cybersecuritynews.com/lumma-steale...#Infosec#Security#Cybersecurity#CeptBiro#LummaStealer#PublicGitHubCommands

Hackers Delivers Lumma Stealer Via Public GitHub Commands

Threat actors often target the popular code repository platform "GitHub" due to it's wide use, and features that this platform offers.

Okay, who wants some handcrafted, artisanal #ThreatIntel? The latest versions of LummaStealer use `BitLockerToGo.exe` as a process hollowing/injection target to do its second stage work. Detecting execution or network activity from this binary is high-fidelity. Nobody uses it in real life.

Thank you LummaStealer for still not knowing how to strip Go debug symbols.

Our latest edition of module updates and support for ACCE is available. www.ciphertechsolutions.com/acce-release...#BSR#Rhadamanthys#LummaStealer#Waltuhium#ARCrypt