Hundreds of fake Reddit sites push Lumma Stealer malware

Researchers discovered ~936 malicious sites impersonating Reddit (529) and WeTransfer (407) that lure users via fake discussion threads and WeTransfer-style download pages to fetch the Lumma Stealer info‑stealer; a full list of domains was published and the campaign likely spreads via malvertising, SEO poisoning, social messages, and malicious sites, posing significant credential and session-token theft risk.