Serious danger in Turkey: Don't lose your cryptocurrencies

Cybersecurity company ESET stated in its published Threat Report that there has been a significant increase in detections of the information stealer Lumma Stealer. According to 2024 data, the highest number of attack attempts were recorded in Peru, Poland, Spain, Mexico, and Slovakia. However, Lumma is not the only threat; Japan, Spain, Turkey, Poland, and Italy are also among the countries most targeted by information stealers.

Lumma Stealer, which was previously thought to target gamers, showed a 369 percent increase in the second half of 2024 compared to the previous period. Such software typically infiltrates systems without the users' knowledge, threatening both consumers and businesses.

Crypto Wallets Are Also a Target

LummaC2 Stealer focuses on seizing user credentials, two-factor authentication extensions, and cryptocurrency wallets. First appearing in 2022, the software is offered for sale on hacking forums and Telegram at prices ranging from 250 to 20,000 dollars. Due to its ease of use and various attack vectors, it has become a popular threat element.

Lumma Spreads From Everywhere

Lumma Stealer spreads through methods such as fake CAPTCHA sites, cracked software installers (e.g., ChatGPT, Vegas Pro), phishing emails, and Discord messages. It has also been detected on platforms such as pirated Windows activators and adult content sites. In June 2024, it was determined to be spreading by hiding under the guise of automation tools for the Hamster Kombat game.

Information thieves can cause financial and personal losses by seizing users' credentials. For businesses, it poses serious risks such as network breaches, data leaks, and ransomware attacks.

Methods of Protection Against Information Stealers

Use a Security Solution: Obtain an endpoint security solution that offers real-time protection.

Do Not Neglect Updates: Failing to keep systems up to date makes them vulnerable to cyberattacks.

Do Not Click on Unknown Links: Avoid opening suspicious attachments and only download software from trusted sources.

Being vigilant against such threats is of great importance for both individuals and businesses.

News Source: 12punto