LummaC2 Fractures as Acreed Malware Becomes Top Dog
ID: f6775286-1c1f-5dff-aa50-81f66c1f28e4
STIX ID: report--f6775286-1c1f-5dff-aa50-81f66c1f28e4
Feed Name: Dark Reading
Date Published: 2025-06-03
Date Updated: 2026-04-21
Author: Kristina Beek, Associate Editor, Dark Reading
The report describes how Lumma (LummaC2) infostealer activity continues despite domain seizures and partial infrastructure takedowns, while a newcomer named Acreed has quickly become prevalent on credential marketplaces; researchers note widespread distribution methods (YouTube, GitHub, MediaFire, malicious captcha pages), use by ransomware and criminal groups, and law-enforcement measures that exploited an iDRAC vulnerability to disrupt operators.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
