The LummaC2 v4.0 malware, operating under the Malware-as-a-Service model, uses trigonometry to identify genuine human activity and evade detection by sandboxes used for malware analysis. The malware requires continuous cursor movement to bypass detection. It primarily steals sensitive data including login credentials and credit card details, and its ongoing updates pose a significant threat to financial security.

“PupkinStealer” A New .NET-Based Malware Steals Browser Credentials & Exfiltrate via Telegram
PupkinStealer is a C# malware that steals sensitive data, including browser credentials and desktop files, using Telegram for stealthy data exfiltration. Discovered in April 2025,