AuraStealer Infostealer Targeting Users with 48 C2 Domains in Ongoing Campaigns

Threat actors are actively deploying a new infostealer dubbed “AuraStealer,” backed by a growing customer base, 48 identified command‑and‑control (C2) domains, and multiple ongoing campaigns abusing popular platforms like TikTok and cracked‑software sites. AuraStealer emerged on Russian‑language cybercrime forums in mid‑2025, positioning itself as a successor and competitor to LummaC2 in the wake of Lumma’s […]

The post AuraStealer Infostealer Targeting Users with 48 C2 Domains in Ongoing Campaigns appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.