Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Lumma Stealer C2 Communication - museumtespaceorsp.shop

Nermin Smajic@NeoXS

•updated Nov 24, 2025•4•1•157

Detects HTTP/HTTPS POST requests to known Lumma Stealer C2 domain

Sigma

Tags

S1213 - Lumma Stealer T1071.001 - Web Protocols T1041 - Exfiltration Over C2 Channel TA0011 - Command and Control TA0010 - Exfiltration Proxy Request Network Generic Palo Alto Panos Firewall Fortinet Fortigate Firewall Cisco Asa Firewall Checkpoint Firewall Juniper Junos Device Huawei Network Device Squid Proxy Haproxyattack.command_and_controlattack.t1071.001attack.exfiltrationattack.t1041

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?