Fake Error Messages Used in Lumma Stealer, RAT Attacks

Several threat actors are leveraging a “unique social engineering” tactic in order to infect users with various information stealers and remote access trojans like Lumma Stealer, DarkGate and NetSupport.

The technique has been observed in attacks that started in early March and that are ongoing. Attackers show victims a pop-up textbox, which they either send in malicious emails or display on compromised, legitimate websites. The pop-up message tells users that an error occurred when attempting to open a document attachment …

access attackers attacks darkgate engineering error fake infect information information stealers lumma lumma stealer march messages netsupport order pop rat remote access remote access trojans social social engineering stealer stealers tactic threat threat actors trojans