LummaC2
Named by 4 kept items in this workspace.
Search every workspace for LummaC2. It matches the name as written, so it can find other things that share it.
The items that name it 4
End result of a multi-stage infection launched via ClickFix (fake Human Verification prompt leading to a pasted command in the Windows Run box)
infostealer malware family, MaaS
Infostealer malware referenced in an example compromise that began with a ClickFix infection (Figure 3).
Infostealer malware delivered as a final payload via the steganographic loader execution chain, extracted from Donut-packed shellcode
All threat actors in this workspace.