A brief look at all things infostealers for the week 26, 2025 (23.06.2025–29.06.2025). This week didn’t observe any updates in infostealers. Grabbed some numbers from marketplaces and some interesting news/articles.
Infostealer Updates
¯\_(ツ)_/¯
Marketplace Updates
This section provides some numbers taken from the marketplaces, which include numbers of victims based on stealers, top 5 countries, and the victim numbers in the countries of the Nordic region.
RussianMarket
Stealers by number of victims
| Stealer name | Number of victims |
|---|---|
| Lumma | 9,163,357 |
| RisePro | 1,429,161 |
| Vidar | 1,397,404 |
| StealC | 1,033,044 |
| RedLine | 789,394 |
| Raccoon | 329,330 |
| Acreed | 284,761 |
| Rhadamanthys | 24,419 |
Top 5 countries by number of victims
| Country | Number of victims |
|---|---|
| India | 1,512,854 |
| Brazil | 1,122,767 |
| Indonesia | 779,975 |
| Egypt | 713,689 |
| Pakistan | 698,828 |
Nordic region countries
| Country | Number of victims |
|---|---|
| Sweden | 24,625 |
| Denmark | 13,150 |
| Norway | 10,343 |
| Finland | 8,742 |
| Iceland | 1,237 |
| Greenland | 183 |
| Faroe | 117 |
| Åland | 21 |
ExodusMarket
Stealers by number of victims
| Stealer name | Number of victims |
|---|---|
| Lumma | 461,625 |
| Rhadamanthys | 51,584 |
| RedLine | 35,097 |
| Unknown | 13,626 |
| StealC | 9,212 |
| Vidar | 4,734 |
Top 5 countries by number of victims
| Country | Number of victims |
|---|---|
| India | 62,580 |
| Brazil | 43,774 |
| Indonesia | 33,960 |
| USA | 23,095 |
| Philippines | 21,980 |
Nordic region countries
| Country | Number of victims |
|---|---|
| Sweden | 1,555 |
| Denmark | 904 |
| Norway | 694 |
| Finland | 515 |
| Iceland | 77 |
Articles/News
Lumma meets LolzTeam
- https://intelinsights.substack.com/p/lumma-meets-lolzteam
Malware Analysis – Inside Lumma Stealer
- https://www.certego.net/blog/lummastealer/
ODYSSEY STEALER: THE REBRAND OF POSEIDON STEALER
- https://www.cyfirma.com/research/odyssey-stealer-the-rebrand-of-poseidon-stealer/
Black Hat SEO Poisoning Search Engine Results For AI to Distribute Malware
- https://www.zscaler.com/blogs/security-research/black-hat-seo-poisoning-search-engine-results-ai-distribute-malware
Infostealer Disguised as Copyright Infringement Document Distributed in Korea
- https://asec.ahnlab.com/en/88544/