Suspicious Connection to TLDs or Steamcommunity API as Seen in Lumma Infections

Kaung Khant Ko@kaungkhantko

•updated Aug 18, 2025•3•2•50

Detects possible Lumma infections based on non-browser network connections to TLDs or steamcommunity API as often seen in Lumma infections