Increase in Lumma Stealer Activity Coincides with Use of Adaptive Browser Fingerprinting Tactics

November 13, 2025 · Trend Micro · Severity: MEDIUM

In this blog entry, Trend™ Research analyses the layered command-and-control approaches that Lumma Stealer uses to maintain its ongoing operations while enhancing collection of victim-environment data.

Key Takeaways

Trend Research analyzed the layered command-and-control approaches that Lumma Stealer uses to maintain ongoing operations.
The stealer's activity increase coincides with the use of adaptive browser fingerprinting to enhance victim-environment data collection.
Defenders should monitor for browser fingerprinting and layered C2 infrastructure when hunting for Lumma Stealer infections.