#BREAKING #ESETresearch can confirm the news of #Lumma Stealer's revival. ESET telemetry and botnet tracking show that operators are rebuilding their infrastructure, with their renewed activity reaching similar levels to those before the #disruption in May 2025.
Lumma Stealer operators are registering dozens of new domains weekly, resolving them primarily at nameservers located in RU. As seen with other threats in the past, this can complicate future attempts to disrupt its malicious operations.
In partnership with #Microsoft and other allies, ESET is tracking Lumma Stealer activity and continues to partially disrupt its operations, specifically by targeting its #Steam dead drop resolvers.
While ESET telemetry shows new Lumma Stealer builds weekly, their codebase hasn’t changed much since the takedown attempt. This suggests that the attackers had to focus on operational recovery instead of innovation.
C&C data show reduced activity around the disruption (marked in turquoise) but the number of new samples detected per day has seen only minimal changes, highlighting the continual risk.
For more info on Lumma Stealer and the disruption, read our blogpost from a few weeks back https://www.welivesecurity.com/en/eset-research/eset-takes-part-global-operation-disrupt-lumma-stealer/
Lumma Stealer operators are registering dozens of new domains weekly, resolving them primarily at nameservers located in RU. As seen with other threats in the past, this can complicate future attempts to disrupt its malicious operations.
In partnership with #Microsoft and other allies, ESET is tracking Lumma Stealer activity and continues to partially disrupt its operations, specifically by targeting its #Steam dead drop resolvers.
While ESET telemetry shows new Lumma Stealer builds weekly, their codebase hasn’t changed much since the takedown attempt. This suggests that the attackers had to focus on operational recovery instead of innovation.
C&C data show reduced activity around the disruption (marked in turquoise) but the number of new samples detected per day has seen only minimal changes, highlighting the continual risk.
For more info on Lumma Stealer and the disruption, read our blogpost from a few weeks back https://www.welivesecurity.com/en/eset-research/eset-takes-part-global-operation-disrupt-lumma-stealer/
#BREAKING: i have an irresistible craving for an almond croissant
joene 🏴🍉
boosted
#Breaking Video from Gaza shows thousands of hungry Palestinians defying a constant hail of bullets fired by US and Israeli soldiers supposedly operating a food aid distribution.
Palestinians in Gaza are posting that they are so hungry they would rather die of bullet wounds than of starvation.
They report thousands have been shot at these death camps disguised as "aid" centers.
#Gaza#GazaGenocide#FreePalestine#FeedPalestine#Trump #netanyahu#Israel#Palestine#US#UK#EU
#Breaking Video from Gaza shows thousands of hungry Palestinians defying a constant hail of bullets fired by US and Israeli soldiers supposedly operating a food aid distribution.
Palestinians in Gaza are posting that they are so hungry they would rather die of bullet wounds than of starvation.
They report thousands have been shot at these death camps disguised as "aid" centers.
#Gaza#GazaGenocide#FreePalestine#FeedPalestine#Trump #netanyahu#Israel#Palestine#US#UK#EU
Tim Chambers
boosted
#Breaking: CDC advisory panel, selected by RFK Jr., recommends thimerosal be dropped from flu vaccines
https://www.statnews.com/2025/06/26/rfk-jr-new-acip-panel-bans-thimerosal-in-flu-shots-preservative-long-a-target-of-antivax-activists/
https://www.statnews.com/2025/06/26/rfk-jr-new-acip-panel-bans-thimerosal-in-flu-shots-preservative-long-a-target-of-antivax-activists/
#Breaking: CDC advisory panel, selected by RFK Jr., recommends thimerosal be dropped from flu vaccines
https://www.statnews.com/2025/06/26/rfk-jr-new-acip-panel-bans-thimerosal-in-flu-shots-preservative-long-a-target-of-antivax-activists/
https://www.statnews.com/2025/06/26/rfk-jr-new-acip-panel-bans-thimerosal-in-flu-shots-preservative-long-a-target-of-antivax-activists/
It's once again time for the Breaking News Consumer's Handbook:
- In the immediate aftermath, news outlets will get it wrong.
- Don't trust anonymous sources.
- Don't trust stories that cite another news outlet as the source of the information.
- There's almost never a second shooter.
- Pay attention to the language the media uses.
- "We are getting reports"…could mean anything.
- "We are seeking confirmation"…means they don't have it.
- "[News outlet] has learned"…means it has a scoop or is going out on a limb.
- Look for news outlets close to the incident.
- Compare multiple sources.
- Big news brings out the fakers. And photoshoppers.
- Beware reflexive retweeting. Some of this is on you.
Once again, see the original blog post for elaboration and comments on all these points.
(via @Sheril)
![Breaking News Consumer's Handbook (onthemedia.org):
1. In the immediate aftermath, news outlets will get it wrong.
2. Don't trust anonymous sources.
3. Don't trust stories that cite another news outlet as the source of the information.
4. There's almost never a second shooter.
5. Pay attention to the language the media uses.
- "We are getting reports"…could mean anything.
- "We are seeking confirmation"…means they don't have it.
- "[News outlet] has learned"…means it has a scoop or is going out on a limb.
6. Look for news outlets close to the incident.
7. Compare multiple sources.
8. Big news brings out the fakers. And photoshoppers.
9. Beware reflexive retweeting. Some of this is on you.](https://status.nevillepark.ca/fileserver/01E7KXQY753BHZVT5NGAP0Z1YW/attachment/original/01JYAR5N79E94QMFWXE6J9X26Q.png)
#Breaking Seattle area immigrants have reported getting notifications of mandatory immigration interviews on Saturday and Sunday this week.
The problem is that there have never been weekend interviews like this so foreign residents are afraid it will be a large ICE roundup. Also, this weekend many liberals will be focusing on symbolic #NoKings protests instead of material support.
So maybe consider cop watching an ICE office instead
#Breaking At least two immigrants have been detained by ICE/DHS at their surprise mandatory interviews today near Seattle.
Confirmed reports indicate many immigrants have started showing up for the interviews. Most have been able to leave within an hour. Two people however haven't returned for more than an hour. Their families and OTG witnesses report the missing two are now in ICE custody.
#Breaking Seattle area immigrants have reported getting notifications of mandatory immigration interviews on Saturday and Sunday this week.
The problem is that there have never been weekend interviews like this so foreign residents are afraid it will be a large ICE roundup. Also, this weekend many liberals will be focusing on symbolic #NoKings protests instead of material support.
So maybe consider cop watching an ICE office instead
wakest ⁂
boosted
#Breaking Bisan is talking on a live stream with the Madleen Crew!
#Breaking Bisan is talking on a live stream with the Madleen Crew!