EMERGENCY MANAGEMENT association OF TEXAS

Today, May 21, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) released a joint Cybersecurity Advisory, LummaC2 Malware Targeting U.S. Critical Infrastructure Sectors.

This advisory details the tactics, techniques, procedures, and indicators of compromise (IOCs) linked to threat actors deploying the LummaC2 malware. This malware poses a serious threat, capable of infiltrating networks and exfiltrating sensitive information, to vulnerable individuals’ and organizations’ computer networks across multiple U.S. critical infrastructure sectors.  According to FBI information and trusted third-party reporting, this activity has been observed as recently as May 2025. The IOCs included in this advisory were associated with LummaC2 malware infections from November 2023 through May 2025.

Organizations are strongly urged to review the advisory and implement the recommended mitigations to reduce exposure and impact.

– Download pdf.