logo

LummaC2 Fractures as Acreed Malware Becomes Top Dog

ID: f6775286-1c1f-5dff-aa50-81f66c1f28e4

STIX ID: report--f6775286-1c1f-5dff-aa50-81f66c1f28e4

Feed Name: Dark Reading

Threat Score
72/100

Date Published: 2025-06-03

Date Updated: 2026-04-21

Author: Kristina Beek, Associate Editor, Dark Reading

...
...

The report describes how Lumma (LummaC2) infostealer activity continues despite domain seizures and partial infrastructure takedowns, while a newcomer named Acreed has quickly become prevalent on credential marketplaces; researchers note widespread distribution methods (YouTube, GitHub, MediaFire, malicious captcha pages), use by ransomware and criminal groups, and law-enforcement measures that exploited an iDRAC vulnerability to disrupt operators.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.