Lumma Stealer, along with other malware variants, is being distributed through the GitHub infrastructure in a sophisticated campaign.
Lumma Stealer is a data-stealing malware that extracts credentials and files while connecting to adversary servers.
Defenders can use SOC Prime Platform to access detection content and Sigma rules for Lumma Stealer and other associated malware.
To mitigate threats like Lumma Stealer, organizations are advised to validate URLs and files, inspect email attachments, and enforce a zero-trust approach.