> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# IOC Alert: Lumma Stealer Command-and-Control Infrastructure
- URL: https://darkwebinformer.com/ioc-alert-lumma-stealer-command-and-control-infrastructure/
- Published: 2025-09-05T19:25:57.000Z
- Updated: 2025-09-05T19:25:57.000Z
- Author: Dark Web Informer
- Tags: IOC

📖 **Overview**  
A URL-based indicator has been identified linking to a **Telegram channel** leveraged as command-and-control infrastructure for **Lumma Stealer**. Telegram continues to be abused by threat actors for data exfiltration and C2 management due to its encryption and ease of access. Confidence is assessed at 75%.

---

📌 **Key Details**

| Field           | Information                |
| --------------- | -------------------------- |
| **Type**        | URL                        |
| **Indicator**   | t\[.\]me/bdfgjdf5          |
| **Threat Type** | Botnet C2                  |
| **Malware**     | win.lumma                  |
| **Confidence**  | 75%                        |
| **Date**        | 05 Sep 2025 – 18:01:22 UTC |
| **Tags**        | Lumma                      |
| **Reporter**    | abuse\_ch                  |

---

🔎 **URLScan Result**  
Page Title: Telegram: View @sguajfjsjf  
Screenshot: <https://urlscan.io/screenshots/01991b03-c03c-72cf-b3b0-c358fd3c55e7.png>  
Result: [https://urlscan.io/result/01991b03-c03c-72cf-b3b0-c358fd3c55e7/](https://urlscan.io/result/01991b03-c03c-72cf-b3b0-c358fd3c55e7)

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2025/09/97832598761978698723.jpg)

---

📡 **Related Intelligence**  
VirusTotal Report: <https://www.virustotal.com/gui/url/5912bb62f0a6f9513b5cafbdae34bb88e07feae5d036321b5b39c63a8d85009b>  
Reference: [https://bazaar.abuse.ch/sample/f57829fccab2aa91f23ab2a8779fc7aa93bf5eabd1010bb3479580989f6bce45/](https://bazaar.abuse.ch/sample/f57829fccab2aa91f23ab2a8779fc7aa93bf5eabd1010bb3479580989f6bce45/?utm%5Fsource=chatgpt.com)

---

🛡️ **Defensive Guidance**

- Monitor for Lumma Stealer beaconing patterns over Telegram channels.
- Hunt for credential exfiltration attempts and Telegram API usage in logs.
- Review telemetry for traffic to other suspicious Telegram channels.

---

⚠️ Confidence is **moderate (75%)**, requiring additional corroboration before operational blocking in all environments.