Threat Actor
ImLupin
- First Reported
- Sep 25, 2026
- Latest Reported
- Sep 25, 2026
Reported Context (1)
- The report identifies ImLupin as a seller who advertised UK email-and-password dumps and operated rebranded Telegram storefronts and websites selling checked mail access and verified accounts. The report attributes these accounts to one persistently rebranded seller with reasonable confidence; the seller's real-world identity remains unresolved. StealthMole Traces ImLupin Credential Operation Across Telegram and Forums
Vendors (1)
Tools (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.