S1213 - Lumma Stealer

Name: S1213 - Lumma Stealer
Creator: Maltiverse
Published: 2025-10-17

Lumma Stealer is a Malware-as-a-Service (MaaS) infostealer that targets Windows systems to steal sensitive data such as passwords, crypto wallets, and 2FA tokens. It spreads through phishing, fake downloads, and malicious websites, allowing attackers to collect and sell stolen information or use it to deploy other malware.

Author: agomez
Created: 2025-10-17 10:07:08
Last updated: 2026-02-07 19:06:53
Downloads: 44277
Hostname indicators: 1646
URL indicators: 1257
Sample indicators: 15445

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

pierrycomm.cfd Hostname

modified 2026-11-07 04:40:36
Lumma Stealer (ThreatFox Abuse.ch)

hopezx.run Hostname

modified 2026-11-07 04:40:35
Lumma Stealer (ThreatFox Abuse.ch)

klinepdwk.live Hostname

modified 2026-11-07 04:40:29
Lumma Stealer (ThreatFox Abuse.ch)

razefti.cyou Hostname

modified 2026-11-07 04:40:25
Lumma Stealer (ThreatFox Abuse.ch)

office360livemail.live Hostname

modified 2026-11-07 04:40:20
Lumma Stealer (ThreatFox Abuse.ch)

recyclqb.cyou Hostname

modified 2026-11-07 04:40:18
Lumma Stealer (ThreatFox Abuse.ch)

wrinkky.cyou Hostname

modified 2026-11-07 04:40:15
Lumma stealer (Maltiverse Threat Observatory)

btcgeared.live Hostname

modified 2026-11-07 04:40:09
Lumma Stealer (ThreatFox Abuse.ch)

ethnugm.xyz Hostname

modified 2026-11-07 04:40:02
Lumma Stealer (ThreatFox Abuse.ch)

survviv.xyz Hostname

modified 2026-11-07 04:40:00
Lumma Stealer (ThreatFox Abuse.ch)

pleasurenarrowsdla.shop Hostname

modified 2026-11-07 04:40:00
Lumma Stealer (ThreatFox Abuse.ch)

wiesespark.cyou Hostname

modified 2026-11-07 04:40:00
Lumma Stealer (ThreatFox Abuse.ch)

improvsv.live Hostname

modified 2026-11-07 04:40:00
Lumma Stealer (ThreatFox Abuse.ch)

strappystyio.shop Hostname

modified 2026-11-07 04:39:57
Lumma Stealer (ThreatFox Abuse.ch)

audioux.qpon Hostname

modified 2026-11-07 04:39:57
Lumma Stealer (ThreatFox Abuse.ch)

miserzb.cyou Hostname

modified 2026-11-07 04:39:57
Lumma Stealer (ThreatFox Abuse.ch)

hidatt.cyou Hostname

modified 2026-11-07 04:39:57
Lumma stealer (Maltiverse Threat Observatory)

celebratioopz.shop Hostname

modified 2026-11-07 04:39:54
Lumma Stealer (ThreatFox Abuse.ch)

sofahuntingslidedine.shop Hostname

modified 2026-11-07 04:39:52
Lumma Stealer (ThreatFox Abuse.ch)

tsoi-zhiv.com Hostname

modified 2026-11-07 04:39:49
Lumma Stealer (ThreatFox Abuse.ch)

icureq.live Hostname

modified 2026-11-07 04:39:45
Lumma Stealer (ThreatFox Abuse.ch)

horsvyz.cyou Hostname

modified 2026-11-07 04:39:37
Lumma stealer (Maltiverse Threat Observatory)

dein-waschbaer.de Hostname

modified 2026-11-07 04:39:33
Lumma Stealer (ThreatFox Abuse.ch)

earthycodlors.bet Hostname

modified 2026-11-07 04:39:28
Lumma Stealer (ThreatFox Abuse.ch)

modestessayevenmilwek.shop Hostname

modified 2026-11-07 04:39:26
Lumma Stealer (ThreatFox Abuse.ch)

gemcreedarticulateod.shop Hostname

modified 2026-11-07 04:39:24
Lumma Stealer (ThreatFox Abuse.ch)

jumpstarbt.live Hostname

modified 2026-11-07 04:39:20
Lumma Stealer (ThreatFox Abuse.ch)

mistjlep.cyou Hostname

modified 2026-11-07 04:39:12
Lumma Stealer (ThreatFox Abuse.ch)

striketr.live Hostname

modified 2026-11-07 04:39:12
Lumma Stealer (ThreatFox Abuse.ch)

skicloud-my.xyz Hostname

modified 2026-11-07 04:39:12
Lumma Stealer (ThreatFox Abuse.ch)

mintysoary.help Hostname

modified 2026-11-07 04:39:10
Lumma Stealer (ThreatFox Abuse.ch)

cacodsq.click Hostname

modified 2026-11-07 04:39:05
Lumma Stealer (ThreatFox Abuse.ch)

wolfestandt.run Hostname

modified 2026-11-07 04:39:04
Lumma Stealer (ThreatFox Abuse.ch)

techwaveg.run Hostname

modified 2026-11-07 04:39:03
Lumma Stealer (ThreatFox Abuse.ch)

reliefintorud.life Hostname

modified 2026-11-07 04:39:02
Lumma Stealer (ThreatFox Abuse.ch)

mutedhofrn.live Hostname

modified 2026-11-07 04:39:00
Lumma Stealer (ThreatFox Abuse.ch)

orijinalecza.net Hostname

modified 2026-11-07 04:38:59
Lumma Stealer (ThreatFox Abuse.ch)

medicinebuckerrysa.pw Hostname

modified 2026-11-07 04:38:57
Lumma Stealer (ThreatFox Abuse.ch)

roomabolishsnifftwk.shop Hostname

modified 2026-11-07 04:38:39
Lumma Stealer (ThreatFox Abuse.ch)

conceptionnyi.sbs Hostname

modified 2026-11-07 04:38:36
Lumma Stealer (ThreatFox Abuse.ch)

gservice-node.io Hostname

modified 2026-11-07 04:38:32
Lumma Stealer (ThreatFox Abuse.ch) · Malicious behavior (Maltiverse Threat Observatory) · Lumma stealer (Maltiverse Threat Observatory)

mennyudosirso.shop Hostname

modified 2026-11-07 04:38:27
Lumma Stealer (ThreatFox Abuse.ch)

deallerospfosu.shop Hostname

modified 2026-11-07 04:38:27
Lumma Stealer (ThreatFox Abuse.ch)

castifye.live Hostname

modified 2026-11-07 04:38:21
Lumma Stealer (ThreatFox Abuse.ch)

mobitront.run Hostname

modified 2026-11-07 04:38:12
Lumma Stealer (ThreatFox Abuse.ch)

soupedburhsh.biz Hostname

modified 2026-11-07 04:38:12
Lumma Stealer (ThreatFox Abuse.ch)

politefrightenpowoa.pw Hostname

modified 2026-11-07 04:38:12
Lumma Stealer (ThreatFox Abuse.ch)

encephw.cyou Hostname

modified 2026-11-07 04:38:11
Lumma stealer (Maltiverse Threat Observatory)

workableefferz.click Hostname

modified 2026-11-07 04:38:10
Lumma Stealer (ThreatFox Abuse.ch)

effecterectz.xyz Hostname

modified 2026-11-07 04:38:06
Lumma Stealer (ThreatFox Abuse.ch)

dryeyewqpx.live Hostname

modified 2026-11-07 04:38:06
Lumma Stealer (ThreatFox Abuse.ch)

polecy.cyou Hostname

modified 2026-11-07 04:38:06
Lumma stealer (Maltiverse Threat Observatory)

circumii.digital Hostname

modified 2026-11-07 04:38:03
Lumma Stealer (ThreatFox Abuse.ch)

importhd.cyou Hostname

modified 2026-11-07 04:38:03
Lumma Stealer (ThreatFox Abuse.ch) · Lumma stealer (Maltiverse Threat Observatory)

transdx.cyou Hostname

modified 2026-11-07 04:38:02
Lumma Stealer (ThreatFox Abuse.ch)

backsan.cyou Hostname

modified 2026-11-07 04:38:02
Lumma Stealer (ThreatFox Abuse.ch) · Lumma stealer (Maltiverse Threat Observatory)

diamondrushed.com Hostname

modified 2026-11-07 04:38:02
Lumma Stealer (ThreatFox Abuse.ch)

slothwe.digital Hostname

modified 2026-11-07 04:38:02
Lumma Stealer (ThreatFox Abuse.ch)

triggerte.digital Hostname

modified 2026-11-07 04:38:01
Lumma Stealer (ThreatFox Abuse.ch)

samedicq.live Hostname

modified 2026-11-07 04:38:01
Lumma Stealer (ThreatFox Abuse.ch)

liabilityarrangemenyit.shop Hostname

modified 2026-11-07 04:38:01
Lumma Stealer (ThreatFox Abuse.ch)

pillowbrocccolipe.shop Hostname

modified 2026-11-07 04:37:56
Lumma Stealer (ThreatFox Abuse.ch)

p10tgrace.sbs Hostname

modified 2026-11-07 04:37:51
Lumma Stealer (ThreatFox Abuse.ch)

heatmodd.digital Hostname

modified 2026-11-07 04:37:47
Lumma Stealer (ThreatFox Abuse.ch)

bravelyko.run Hostname

modified 2026-11-07 04:37:31
Lumma Stealer (ThreatFox Abuse.ch)

liberatuie.run Hostname

modified 2026-11-07 04:37:30
Lumma Stealer (ThreatFox Abuse.ch)

loom.pw Hostname

modified 2026-11-07 04:37:25
Lumma Stealer (ThreatFox Abuse.ch)

vqalkyrieong.run Hostname

modified 2026-11-07 04:37:17
Lumma Stealer (ThreatFox Abuse.ch)

wxayfarer.live Hostname

modified 2026-11-07 04:37:12
Lumma Stealer (ThreatFox Abuse.ch)

shenyac.cyou Hostname

modified 2026-11-07 04:37:05
Lumma stealer (Maltiverse Threat Observatory) · CountLoader (ThreatFox Abuse.ch)

lev-tolstoi.com Hostname

modified 2026-11-07 04:37:04
Lumma Stealer (ThreatFox Abuse.ch) · Lumma stealer (Maltiverse Threat Observatory)

soulfujltraveler.hair Hostname

modified 2026-11-07 04:37:03
Lumma Stealer (ThreatFox Abuse.ch)

interpwthc.digital Hostname

modified 2026-11-07 04:36:56
Lumma Stealer (ThreatFox Abuse.ch) · Phishing (OpenPhish)

thundercoall.live Hostname

modified 2026-11-07 04:36:52
Lumma Stealer (ThreatFox Abuse.ch)

notionz.qpon Hostname

modified 2026-11-07 04:36:46
Lumma Stealer (ThreatFox Abuse.ch)

corgiw.live Hostname

modified 2026-11-07 04:36:44
Lumma Stealer (ThreatFox Abuse.ch)

gubbisx.cyou Hostname

modified 2026-11-07 04:36:43
Lumma Stealer (ThreatFox Abuse.ch)

insideparti.cfd Hostname

modified 2026-11-07 04:36:23
Lumma Stealer (ThreatFox Abuse.ch)

misha-lomonosov.com Hostname

modified 2026-11-07 04:36:21
Lumma Stealer (ThreatFox Abuse.ch)

absoluod.cyou Hostname

modified 2026-11-07 04:36:15
Lumma Stealer (ThreatFox Abuse.ch)

affordtempyo.biz Hostname

modified 2026-11-07 04:36:14
Lumma Stealer (ThreatFox Abuse.ch)

mildpacewp.today Hostname

modified 2026-11-07 04:36:13
Lumma Stealer (ThreatFox Abuse.ch)

sippymroat.cfd Hostname

modified 2026-11-07 04:36:08
Lumma Stealer (ThreatFox Abuse.ch)

coderspartk.digital Hostname

modified 2026-11-07 04:36:07
Lumma Stealer (ThreatFox Abuse.ch)

singerreasonnbasldd.xyz Hostname

modified 2026-11-07 04:36:02
Lumma Stealer (ThreatFox Abuse.ch)

varitycookypowerw.xyz Hostname

modified 2026-11-07 04:36:01
Lumma Stealer (ThreatFox Abuse.ch)

hustjonr.cyou Hostname

modified 2026-11-07 04:35:59
Lumma Stealer (ThreatFox Abuse.ch)

culturesketchfinanciall.shop Hostname

modified 2026-11-07 04:35:57
Lumma Stealer (ThreatFox Abuse.ch)

xmedresp.run Hostname

modified 2026-11-07 04:35:57
Lumma Stealer (ThreatFox Abuse.ch)

contemteny.site Hostname

modified 2026-11-07 04:35:56
Lumma Stealer (ThreatFox Abuse.ch) · Generic Malware (Maltiverse Threat Observatory)

shootyprovedn.biz Hostname

modified 2026-11-07 04:35:40
Lumma Stealer (ThreatFox Abuse.ch)

raisezx.run Hostname

modified 2026-11-07 04:35:38
Lumma Stealer (ThreatFox Abuse.ch)

callosallsaospz.shop Hostname

modified 2026-11-07 04:35:35
Lumma Stealer (ThreatFox Abuse.ch)

risehighq.live Hostname

modified 2026-11-07 04:35:35
Lumma Stealer (ThreatFox Abuse.ch)