"Fake Browser Updates Spread BitRAT and Lumma Stealer Malware"

Cybersecurity firm eSentire reports that fake browser updates are being used to distribute BitRAT and Lumma Stealer malware. These attacks involve redirecting users to bogus update pages, downloading malicious files from Discord, and executing PowerShell scripts to install the malware. The use of trusted names and platforms like Discord enhances the reach and impact of these attacks. Lumma Stealer has become one of the most prevalent information stealers, with a significant increase in logs listed for sale. Other campaigns also use similar tactics to distribute various malware.