Beware: Fake Browser Updates Deliver BitRAT and Lumma Stealer Malware

Multiple security vendors observed active campaigns leveraging fake browser update pages and social-engineering to distribute RATs (BitRAT), Lumma Stealer (LummaC2), loaders and PowerShell-based payload chains—using hosting on platforms like Discord, webhards, and pirated-software sites; the activity includes image-hosted payload retrieval, manual PowerShell execution lures (ClearFake), and DNSPod-based fast-flux techniques that increase resilience and scale.