Jump to content

Draft:Infostealer/Win.LummaC2

From Wikipedia, the free encyclopedia

Infostealer/Win.LummaC2, also identified as "W32/ABRisk.ITLS-0529", "Trojan.Agent.GKOQ (B)", or "Trojan.Agent.GKOQ", is a type of malware primarily propagated through malicious programs such as Remote Access Trojans (RATs).

Operation[edit]

Infostealer/Win.LummaC2 is closely associated with other malware strains like "TR/Dldr.Rugmi.odadz", "Win32/TrojanDownloader.Rugmi.AHO", and "Downloader.Rugmi.Win32.733".

It is designed to clandestinely gather critical information from users and deploy unwanted software on the targeted devices.

Discovery and Activity[edit]

First detected in 2022, Infostealer/Win.LummaC2 experienced a significant surge in detections between July 2023 and January 2024.

According to reports from "EnigmaSoft," the malware was observed being sold in underground forums for a monthly fee of $250 (USD).

See also[edit]

References[edit]