A brief look at all things infostealers for the week 48, 2024 (25.11.2024–01.112.2024). Was a bit too busy with new work and family stuff, forgot to update. There wasn’t too many developments in infostealers during the week 48. Well, except Lumma stealer posting 3 updates during the week 🙂

Lumma Update

Note: The update posts are copy-pasted as is (and machine-translated if post wasn’t available in English)

Update 26.11

1. Improved search by url
2. Restore token collection partially restored
3. Fixed bug when not all cookies were received
4. Cleaned WD 10/11 + Cloud

Screenshot from XSS forum

Update 27.11

1. Improved search for filters in logs
2. Added ability to disable History file collection for a specific browser in the config
3. Cleaned Windows Defender 10/11 + Cloud
4. Common gaskets updated
5. Domain with old logs changed (see main panel page)
6. Added a new API method that allows you to get the current build version

Screenshot from XSS forum

Update 30.11

1. Improved collection of passwords, autofills in Chromium browsers
2. Improved collection of cookies in Opera, Opera GX browsers
3. Added a limit of three uploads at the same time
4. Cleaned LNK builder
5. Cleanup WD 10/11 + Cloud

Screenshot from XSS forum

Articles/News

Source Code of $3,000-a-Month macOS Malware ‘Banshee Stealer’ Leaked

• https://www.securityweek.com/source-code-of-3000-a-month-macos-malware-banshee-stealer-leaked/