MITRE ATT&CKsoftware (malware)

S1213 Lumma Stealer

Published 2025-03-22 Modified 2025-03-22 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
LummaStealer
Version
1.0
Created
2025-03-22

Description

Lumma Stealer is an information stealer malware family in use since at least 2022. Lumma Stealer is a Malware as a Service (MaaS) where captured data has been sold in criminal markets to Initial Access Brokers.

Related

Uses · MITRE ATT&CK (35)

  • T1685 Disable or Modify Tools technique
  • T1176.001 Browser Extensions sub-technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1059.010 AutoHotKey & AutoIT sub-technique
  • T1218.015 Electron Applications sub-technique
  • T1036.008 Masquerade File Type sub-technique
  • T1622 Debugger Evasion technique
  • T1620 Reflective Code Loading technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1074.001 Local Data Staging sub-technique
  • T1564.003 Hidden Window sub-technique
  • T1574.001 DLL sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.006 Python sub-technique
  • T1497.001 System Checks sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1566.002 Spearphishing Link sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1553.002 Code Signing sub-technique
  • T1218.005 Mshta sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1055.012 Process Hollowing sub-technique
  • T1539 Steal Web Session Cookie technique
  • T1195 Supply Chain Compromise technique
  • T1204 User Execution technique
  • T1217 Browser Information Discovery technique
  • T1140 Deobfuscate/Decode Files or Information technique
Show all 35 ›

References