LummaC2 Stealer: Major Threat To Crypto Users' Security

LummaC2 is a Windows 32-bit information stealer offered for sale on Russian-language cybercrime forums that targets Chromium- and Firefox-based browsers to exfiltrate crypto wallets, two-factor authentication extensions, browser credentials, cookies, and local files; researchers identified obfuscation using a recurring marker ("edx765"), active C2 servers (195.123.226.91 and 144.76.173.247), numerous malware hashes, and provided IoCs and mitigation guidance (AV, backups, isolate infected devices).