Multi-factor authentication
LummaStealer returns post-takedown with ClickFix ruse
LummaStealer roars back after domain takedown, using fake CAPTCHA ClickFix tricks and CastleLoader to spread via routine user actions.
By Karen Joy Bacudo
•
4 min read
•
Fri, 13th Feb 2026