Indicators in the Lumma advisory
Lumma Stealer profileThe CISA and FBI Lumma advisory published indicators, including file hashes and domains, for organisations to search for in their own systems. CISA and FBI (AA25-141B)
(IOC)
A technical trace showing that a system has been compromised: a file hash, domain, IP address, file path or registry key.
NIST defines an indicator as a technical artifact or observable that suggests an attack is imminent, is underway or has already occurred. NIST CSRC
Indicators have different lifetimes: a file hash can change with a new build and an IP address within a day. Methods and behaviour stay the same for longer. NIST CSRC
From an incident investigation or malware analysis. NIST CSRC
Through advisories and intelligence feeds. CISA and FBI (AA25-141B)
In logs, on endpoints and in network traffic. NIST CSRC
The CISA and FBI Lumma advisory published indicators, including file hashes and domains, for organisations to search for in their own systems. CISA and FBI (AA25-141B)
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.
We use cookies to ensure proper operation of our website, analyze usage, and deliver relevant content and advertisements. You can manage your preferences at any time. Cookie Policy