Lumma Stealer

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[Lumma Stealer](https://attack.mitre.org/software/S1213) is an information stealer malware family in use since at least 2022. [Lumma Stealer](https://attack.mitre.org/software/S1213) is a Malware as a Service (MaaS) where captured data has been sold in criminal markets to Initial Access Brokers.(Citation: Cybereason LumaStealer Undated)(Citation: Netskope LummaStealer 2025)(Citation: Qualys LummaStealer 2024)(Citation: Fortinet LummaStealer 2024)(Citation: TrendMicro LummaStealer 2025)

Associated Techniques (35)
ID ATT&CK Tactics
T1027 Obfuscated Files or Information -
T1027.013 Encrypted/Encoded File -
T1036.008 Masquerade File Type -
T1041 Exfiltration Over C2 Channel -
T1055.012 Process Hollowing -
T1059.001 PowerShell -
T1059.006 Python -
T1059.010 AutoHotKey & AutoIT -
T1071.001 Web Protocols -
T1074.001 Local Data Staging -
T1082 System Information Discovery -
T1113 Screen Capture -
T1119 Automated Collection -
T1140 Deobfuscate/Decode Files or Information -
T1176.001 Browser Extensions -
Aliases (105)
LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer LummaStealer
Metadata
ID: 302
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00