Cybersecurity researchers from Sekoia have warned of hundreds of fake Reddit and WeTransfer pages used to deploy the Lumma Stealer malware. The well-built fake Reddit pages display threads where users share links to fake WeTransfer pages to download malware. The URLs of these pages contain official brand names and sit on .org and .net domains, enhancing their appearance of legitimacy. The actual malware is hosted on “weighcobbweo[.]top.” The targets often depend on the type of software being faked.
LockBit ransomware group falls victim to hackers itself
A data leak has disclosed information about negotiations with victims, Bitcoin wallet addresses, affiliate accounts, and details of attacks.
