Threat Actor
LofyGang
- First Reported
- Apr 3, 2026
- Latest Reported
- Apr 29, 2026
Reported Context (2)
- The article attributes the campaign to LofyGang with high confidence. The group is reported to use a fake Minecraft hack to deliver LofyStealer and to offer a malware-as-a-service model. LofyGang Returns With LofyStealer Campaign Targeting Minecraft Players
- The article reports that LofyGang resurfaced with a fake npm package, undicy-http, delivering a RAT and a Windows payload for credential theft and data exfiltration. ThreatsDay Roundup Covers ShareFile RCE Flaws, Android Rootkit and CloudTrail Evasion
CVE (2)
Malware (6)
People (2)
Threat Actors (6)
MITRE ATT&CK (5)
Vendors (5)
Products (20)
Tools (1)
Industries (2)
Countries (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.