Lumma Stealer

Category: 💻 Cybercrime
Seized Date: 2025-05-21
Visibility: Clear Web

Illustrative image

Description

Lumma Stealer, also known as LummaC2 Stealer, was an information-stealing malware written in the C language. It was available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums starting from at least August 2022. It was believed to have been developed by the threat actor known as "Shamel," who went by the alias "Lumma".

This malware primarily targeted cryptocurrency wallets and two-factor authentication (2FA) browser extensions, ultimately stealing sensitive information from the victim's machine. Lumma Stealer employed sophisticated techniques to evade detection, including the use of counterfeit websites posing as legitimate antivirus software for distribution and promotion.

Lumma Stealer's tactics included using fake CAPTCHAs to deceive users and deliver the malware to their devices. It communicated with command and control (C2) servers to exfiltrate stolen data after infecting a system. The malware was also known for targeting players of popular mobile games, such as Hamster Kombat, by hiding cryptors containing Lumma Stealer in GitHub repositories disguised as helpful automation tools for the game.

In summary, Lumma Stealer was a sophisticated malware that used various methods to steal sensitive information and evade detection, posing a significant threat to users and organizations.

seized message

Original Lumma Stealer seizure banner

Seized domain names

300snails.sbs
3xc1aimbl0w.sbs
3xp3cts1aim.sbs
5ptit5tuded.cyou
701easter.shop
abaft-taboo.bond
aboundag.run
abradeldbb.run
absoulpushx.life
achoerurdv.digital
activedomest.sbs
activitydmy.icu
adaptwrx.digital
adjust-cheek.cyou
advancemeq.run
advertisgnj.cyou
aexquisitecrafts.cyou
agriwellness.world
aiqinsights.icu
aiupdatesd.live
albizzcdlv.digital
allocatinow.sbs
allowy-bleed.cyou
alluringeui.cyou
ambigtiousgoals.cyou
ammoanaly.live
analgcslab.run
anemonebv.run
animatcxju.live
animnalha.icu
antelopej.run
antikidi.live
antilcvope.live
aplointexhausdh.xyz
appgridn.live
apronsxrum.digital
aqua-tic-draco.cyou
aquaticteachu.cyou
aquesolp.run
araucahkbm.live
arenabaeny.cfd
arenbootk.sbs
armretire.sbs
arsenaladv.run
astralconnec.icu
astrivee.world
atranquilwilderness.hair
aureliae.run
automatic-meaty.sbs
awake-weaves.cyou
axionexv.life
badoowaideokel.com
balloon-sneak.cyou
bambamboo.shop
bannertastylbaoeow.xyz
bardsyies.live
barmgek.digital
bashfulacid.lat
battlewlds.live
bearjk.live
beerishint.sbs
beevasyeip.bond
befall-sm0ker.sbs
begindecafer.world
believezioep.com
belleiengieusy.cyou
bemuzzeki.sbs
benefictioraikiitso.xyz
berrylinyj.cyou
bet-cook-fixer.cyou
bhgyuncovered.world
biosphxere.digital
biseagrre.run
bisonq.live
bitteam.info
blacksmithz.run
blade-govern.sbs
bleed5great.cyou
blissfulspillow.digital
blockhubr.live
bloomingzgardens.today
blowwyivot.cfd
bodyridegw.cfd
boldquestq.cyou
boltycoupeln.cyou
boostmodw.live
bored-light.sbs
brakeritonb.icu
brandihx.run
bravelyko.run
breuhiag.live
brighqthorizon.cyou
brightplf.digital
broadecatez.bond
brownieyuz.sbs
btcgeared.live
bulletiner.life
buzzarddf.live
bxattlepath.digital
bxreezyretreat.boats
cabbagepattof.net
callinuxwf.run
campylloir.run
candidatersz.cyou
captaitwik.sbs
captivjatingstories.cyou
capturefann.cyou
carrystuppeder.net
castifye.live
castmanb.live
castmaxw.run
castomarmor.xyz
catedshamefiregifhse.xyz
catterjur.run
caxndidwave.cyou
celestigalp.icu
cemeteryun.cyou
chamelweon.digital
changeablemagent.cyou
changenwg.run
charmingtranskw.xyz
chemistrycworner.today
chimneysickend.icu
chincenterblandwka.pw
chipkitk.run
chivalryr.run
chlenvaginakz.icu
circledexj.cyou
circumii.digital
citxresearchers.icu
citydream.live
citywand.live
civitasu.run
cjlaspcorne.icu
clammypunero.com
clashpravg.cyou
classyhelped.net
clatteqrpq.digital
clearhecho.cyou
clearui.run
clerarhorizon.cyou
clerkpolicemandwusi.xyz
climepunneddus.com
coczyhome.cyou
coilylove.run
coldshpwyb.run
cometusm.run
comexisj.digital
communicationfell.icu
compilecoppydkewsw.xyz
composedmny.cyou
concealedca.bet
conceptionnyi.sbs
condifendteu.sbs
conquemappe.bond
constructgeneratisa.xyz
contractsmell.cyou
cook-rain.sbs
cooperatvassquaidmew.xyz
copper-replace.sbs
coreflighyn.cyou
corgiw.live
countymushroom.cyou
courtjew.digital
cousidporke.icu
cowertbabei.bond
coyoteqw.run
crabw.digital
crave-shek.cyou
creating-egg.cyou
crib-endanger.sbs
crisisrottenyjs.xyz
crookedfoshe.bond
culasova.icu
currenctlu.cyou
curverpluch.lat
cwrispbreeze.cyou
cyberheive.life
cylinder-dawb.cyou
czovercabin.icu
daffy-horses.cyou
daggerpewl.run
datacuet.live
datadynnamics.today
datalabo.run
dayeyerhb.cyou
dayzilons.pw
deadtrainingactioniw.xyz
debonair-brick.cyou
debonairnukk.xyz
decorathnome.icu
deepymouthi.sbs
defaulemot.run
definitib.sbs
dependy-endors.cyou
deportyowm.sbs
depositybounceddwk.xyz
descenrugb.bet
destroy-penn.cyou
deviatemow.live
diffuculttan.xyz
difgitalnexus.run
digimodt.live
digitalmakertinggb.xyz
digitroopc.run
discoverrwz.cfd
discrk.digital
discxeryspace.icu
disobey-curly.sbs
divergeny-frut.cyou
doorwanzeh.live
dragoqnfly.run
drawerbeggar.cfd
drawwyobstacw.sbs
drbettere.live
drearmypillows.icu
dryeyewqpx.live
dsimensio.bet
ducksringjk.sbs
dynamiczl.live
earthsymphzony.today
earthycodlors.bet
easterxeen.run
ecoexpanpd.live
ecomtechv.live
econbult.live
econdeni.live
eczakozmetik.net
eczamedikal.org
edumakerb.digital
effecterectz.xyz
ehticsprocw.sbs
elaboretib.sbs
elegantlawwen.run
elfinyamen.bond
ellaboratepwsz.xyz
elvernwood.digital
enchanyo.digital
enlargkiw.sbs
enumermbzz.live
equatorf.run
equipentxer.icu
exarthynature.run
exemplarou.sbs
exertcreatedadnndjw.xyz
exilepolsiy.sbs
exitiumt.digital
explainvees.sbs
exuberanttjdkwo.xyz
faintbl0w.sbs
fairytalesw.run
falcondfy.digital
fanpuy.com
farewellnzu.icu
fau1tr0mantic.cyou
fcushionpillow.live
ferrexz.run
ferrybarked.world
ferrycheatyk.sbs
fightyglobo.sbs
fiondationkvowos.xyz
firearmsfe.live
firstezkpg.run
fishgh.digital
flamingof.run
fleez-inc.sbs
flighthon.life
flockanxiius.sbs
flowerexju.bet
flyxaway.live
foortyturhud.run
forgeitu.live
formydab.run
fostinjec.today
franecont.run
freckletropsao.pw
freedompoa.live
freshenqew.digital
freshredfish00.shop
freshredfish01.shop
freshredfish02.shop
freshredfish03.shop
freshredfish04.shop
freshredfish05.shop
freshredfish06.shop
freshredfish07.shop
freshredfish08.shop
freshredfish09.shop
frizzettei.sbs
frogmen-smell.sbs
frogs-severz.sbs
furthert.run
futuristx.live
futurizez.live
gadgethgfub.icu
galxnetb.today
garderjjerop.com
geckoz.digital
gendatag.run
givedpooreko.icu
glarefamik.live
globetrotfe.world
glowpop.live
goholiday.run
goldensounew.world
gorillao.digital
grandcommonyktsju.xyz
granystearr.bond
greeconoimy.run
greywe-snotty.cyou
grizzlqzuk.live
growthselec.bond
gsmartmodw.digital
guardeduppe.com
hallowewaplk.run
handgunhan.live
happyjh.world
healsuperbusyz.cyou
heatmodd.digital
heavenluck.shop
helplabp.run
heraldmstaff.live
heroicmint.sbs
hiddenorcphard.hair
highawaretemptersudwu.xyz
hoparround.live
hopezx.run
hosue-billowy.cyou
htardwarehu.icu
hungreecoq.run
hvsdkfjfhj-sd-1.pro
hyperforge.digital
icureq.live
ignites.live
ignoredshee.com
immolatechallen.bond
improvsv.live
improvxf.run
inflexcytv.digital
infuzoriatufelka.com
inglexhsg.digital
innerkomen.com
innovdg.live
insidegrah.run
insideparti.cfd
intelhube.live
invinjurhey.sbs
iqnterstellles.live
irlecont.live
ironloxp.live
isoplethui.sbs
issuehouf.live
italecony.digital
jammy-crusher.bond
jarry-deatile.bond
jarry-fixxer.bond
jawdedmirror.run
jealousslotoykwo.xyz
jellydpubli.icu
jellyfishatth.icu
jobdigitalmarketing.xyz
joinfoulnz.digital
joustingt.run
jowinjoinery.icu
jumplilltk.cfd
jumpstarbt.live
jumpxer.run
jungleamly.run
kazrequesot.digital
keewoolas.pw
kiddyphisicallypr.xyz
killredls.pw
kirghiqldh.run
kzteamprokla5.icu
laddyirekyi.sbs
lancefighsg.run
latitudert.live
learnemoaning.cyou
learnyprocce.bond
ledtechl.run
leg-sate-boat.sbs
legatusi.run
leggbasind.icu
legislatiu.cfd
lemonwsljq.live
lemuruy.live
librari-night.sbs
liftgoodus.cfd
lightenzxc.run
lightsecretatylattew.shop
lipsdonny.com
lonfgshadow.live
longitudde.digital
looky-marked.sbs
lovesportstyle.com
lsunarlandsc.digital
lucticiq.run
lunafixg.life
lunarayl.live
madagaeyrk.run
magnetvxss.live
maiantfuuk.run
maidenbfair.run
manufactiredowreachhd.xyz
manyrestro.lat
marksmaner.live
marksmanm.today
mathcucom.sbs
matterrydamagedowkds.xyz
matteryshzh.cfd
maximusw.live
mediaflowq.run
mediavelk.sbs
medicalbitkisel.net
medicalbitkisel.org
medicinebuckerrysa.pw
medievalarth.live
medikalbitkisel.net
medikalbitkisel.org
meerkaty.digital
meltifyq.run
messbeamy.cfd
metaldoi.run
metalonc.run
metalsyo.digital
mexratet.digital
mobitront.run
modellydivi.sbs
modelshiverd.icu
modenoww.run
modproz.run
modrisey.live
modteamo.live
modtimea.run
moldifye.digital
moldwaye.live
moleqew.run
monstourtu.sbs
moonehobno.bond
moonskyo.run
motion-treesz.sbs
moultruchsi.icu
movemozd.run
munitions.life
musclefarelongea.pw
mustelxfzf.digital
mygadgety.live
mysticmeladow.boats
mysticnexst.cyou
narwhaltr.live
naturefarmingideas.life
naturesartgistry.today
nervepianoyo.sbs
netgizmow.live
newsystuff.cfd
newzeconi.digital
ngotronl.run
nightloqv.run
ninepicchf.bet
noblefamo.run
noblequestx.live
nodepathr.run
noticedseuh.icu
novapherex.digital
novapixw.bet
noxiuos-utopi.bond
nxaturepals.life
nyalat.run
oak-smash.cyou
obeliske.digital
occupy-blushi.sbs
octalfbsh.bet
oemoutxlet.icu
offsetyofcre.bond
offybirhtdi.sbs
opiniomot.cfd
optifyc.live
optiversavl.run
oqutdoorserenity.icu
orangemyther.live
orbitixg.world
orbitust.bet
orijinalecza.net
orijinalecza.org
orjinalecza.net
ostracizez.sbs
oventoolyeditiiow.xyz
overlapseq.digital
owlflright.digital
owner-vacat10n.sbs
ownerbuffersuperw.pw
owpenfield.run
p10tgrace.sbs
p3ar11fter.sbs
pain-temper.bond
paitheadki.cfd
parakehjet.run
pardonbackypestyduw.xyz
passimovrt.cfd
patronar.run
pawgsitiv.icu
peajcefulspaces.cyou
pearlgclutch.run
pedestriankodwu.xyz
peepburry828.sbs
penetratedpoopp.xyz
personyqum.run
pevemtnchil.live
piellowbliss.icu
pierrycomm.cfd
pilloswdelight.bet
pillowcxloud.world
pioneeruyj.sbs
pistolpra.bet
pitheckmsv.live
pixelupf.live
plastic-mitten.sbs
plasticreie.com
platformcati.sbs
playbfulpicnic.pics
plugboth.digital
politefrightenpowoa.pw
politewtod.run
pollution-raker.cyou
pooreveningfuseor.pw
porcupineq.digital
porifefyzc.live
porpoisecx.run
powerful-avoids.sbs
pqembridge.run
pragapin.sbs
precisionde.live
preoductpark.icu
preside-comforter.sbs
prinyveri.cfd
processhol.sbs
proenhann.digital
proggresinvj.cyou
promisedjeylk.cfd
propermixturedwo.xyz
property-imper.sbs
puillowjourney.icu
pukisound.icu
pull-trucker.sbs
qualificationjdwko.xyz
qualifielgalt.sbs
qualiftyquar.icu
quantdatai.live
quantuqearch.live
quarrelepek.bond
quilltayle.live
quityt.digital
quokkauy.live
rainy-lamep.bond
raisezx.run
ravebnks.live
rebuildhurrte.com
record-envyp.sbs
reeferpict.cfd
refurnharj.cfd
relalingj.sbs
relaxingxpillow.digital
releaswrlf.run
reliedevopoi.bond
reliefintorud.life
renewxc.live
repostebhu.sbs
resetnb.run
resignfallk.icu
resinedyw.sbs
resqueoppos.live
restfulrletreats.cyou
retechlabp.run
rhxhube.run
riddled-mnu.cyou
ripe-blade.cyou
risehighq.live
rlxspoty.run
rockemineu.bond
rocketlump.com
rodformi.run
romulusy.digital
rottieud.sbs
royalwuet.live
rugbybrign.life
rundowrlgr.run
sailxz.run
salmonqw.live
salveupp.run
samedicq.live
saturnoy.life
savvy-steereo.sbs
sceeptersong.digital
scieseandbeyond.world
scikevision.today
scrambledmy.cfd
scrapixo.live
scrapodn.run
screvwspa.icu
scriptao.digital
scriptorumh.live
sdfwfsdf.icu
sdolarisp.icu
sealyiu.live
searchilyo.run
sectorecoo.live
sejrenevalley.bet
sendypaster.xyz
serenecomhfort.life
setfreecxz.live
setfupstore.icu
seven40nine.shop
shapestickyr.lat
sheddeqqlu.live
shiftmodh.run
shiftvc.digital
shootforyou.world
shoresolfe.live
shunstriderk.net
sidebyafzy.digital
sideindexfollowragelrew.pw
sidercotay.sbs
silvrercrown.run
simpleupleasures.cyou
simplifyq.live
singaprateq.run
singerreasonnbasldd.xyz
sizefixeds.icu
skirtgrippys.com
skunkxd.live
skylinejo.world
slam-whipp.sbs
slammyslideplanntywks.xyz
sliperyedhby.icu
slipperyloo.lat
slothwe.digital
slowdomkaf.run
smartdatac.run
smash-boiling.cyou
smashygally.sbs
smelterc.live
smeltingt.run
smeltioc.run
snailyeductyi.sbs
snipersecrets.world
snugglcycloud.life
soarxvc.run
sobrattyeu.bond
socialsscesforum.icu
sofahuntingslidedine.shop
softnestl.cyou
soilhewocacy.bet
solarnatgure.run
soliduso.digital
soothingpitllow.icu
sorcery.digital
sordid-snaked.cyou
soulfujltraveler.hair
spacedbv.world
spacetimech.today
spainbizzr.run
sparkiob.digital
spiderq.run
spitechallengddwlsv.xyz
spootyleggiu.cfd
sprinbgstre.icu
sqhadowguard.run
squider.run
starcloc.bet
starfiswh.live
starrynsightsky.icu
statibesearch.world
steelixr.live
steppriflej.xyz
stepupnwr.live
story-tense-faz.sbs
strikebripm.sbs
striketr.live
stripedre-lot.bond
strivehelpeu.bond
stxarnavig.live
stylefnez.digital
stylefstore.icu
subnorrepg.run
sumeriavgv.digital
supjportsho.icu
supporse-comment.cyou
surprisedscaledowp.xyz
sweepyribs.lat
sweetcalcutangkdow.xyz
swellfrrgwwos.xyz
swordandsr.digital
synmedsp.live
sysmeshm.run
talkynicer.lat
tamedgeesy.sbs
taramigo.life
taskrunp.run
techcastlev.live
techguidet.digital
techmindj.live
techmindzs.live
techstyleg.run
techsyncq.run
techwaveg.run
tentabatte.lat
terrifyenyb.icu
thawuy.run
therefsphn.run
thicktoys.sbs
thingymediay.cyou
thinkellk.run
thinkyyokej.sbs
thnnkzt.digital
threeviolen.icu
thrumgh.live
thundercoall.live
tidalqhbf.live
tiltvc.digital
todaybyteh.live
tomorrefig.run
tonedanswered.today
tourjoty.bet
towerxxuytwi.xyz
tracefd.run
tranuqlekper.bond
tremelzxiy.live
triggerte.digital
tripfflux.world
tripfjoyq.life
triphmind.world
tripperxe.live
triremeo.digital
tropiscbs.live
trsipbeat.world
turkeytzq.live
turkeyunlikelyofw.shop
turngallerudgo.icu
twilitghtarc.live
udsysy.run
ukranege.run
underlinefiue.sbs
unfolddh.live
unicoriun.live
unicornu.digital
unihubd.run
unlimirxam.digital
unputplycke.cfd
unsounsucq.run
urbanouasis.cyou
valiantdey.live
valuesads.run
valvulnsuq.run
vanceteo.run
varitycookypowerw.xyz
vennurviot.sbs
versedkinfe.sbs
victoreqs.run
videfavcotr.icu
violanticys.cyou
viriatoe.live
visionmp.live
voteytr.live
voyagedprivillywk.xyz
voyageprivato.bond
voznessxyy.life
vqalkyrieong.run
wandelrgo.live
wanderibd.cfd
wandervc.live
wave-cracky.cyou
wealthestored.icu
weaponrywo.digital
weaponswh.run
weaponwo.life
weavegfg.digital
web-security3.com
webinspisrve.icu
webnesti.live
webpointsl.run
weldecii.live
weldmaxi.digital
weldorae.digital
wickedneatr.sbs
wide-eyeder.cyou
wiesespark.cyou
wildlnifeecho.world
wilrdadventur.digital
wintrerfeast.live
wisecr213acktr.cyou
wishagy.live
wizardrry.digital
wolfestandt.run
woodhlandsong.life
woodpeckersd.run
woodrebough.run
wordingnatturedowo.xyz
wordingyhwj.cyou
wordyfindy.lat
wrath-full.cyou
wrathful-jammy.cyou
wrench-creter.sbs
wrensavoruziu.cyou
wrigglesight.sbs
writeimgaiin.cyou
wwwsyju.digital
wxayfarer.live
xmedresp.run
xrfxcaseq.live
yndo-pepper.bond
zestyasd.run
zootechq.run