GINC-APT-0830 · Tracked, unattributed

LofyGang

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0830 · lofygang

What it is

LofyGang has been found to be linked to more than 200 malicious packages, with thousands of installations throughout 2022. The group, believed to have been operating for more than a year, has multiple hacking objectives, including stealing credit card information and stealing user accounts including Discord Inc. premium accounts, streaming services accounts such as Disney+ and Minecraft accounts.

Tools

The tools and malware families the sources tie to it.

  • Hacking Team UEFI Rootkit
  • StreamEx

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de