Water Kurita is a financially motivated cybercriminal entity that operates the Lumma Stealer information stealer-as-a-service (MaaS) platform. First observed in August 2022, the group specializes in credential and information theft, monetizing stolen data through subscription-based malware distribution and resale to other threat actors. Water Kurita primarily operates on underground forums and marketplaces, exhibiting solid operational security and marketing tactics common in mature MaaS ecosystems. The group's activities were significantly disrupted in September 2025 following a targeted doxxing campaign that exposed alleged core members, leading to a sharp decline in activity and a migration of its customer base to competing infostealers. Water Kurita is an alias used by Trend Micro to track the group behind Lumma Stealer, which is also known as LummaC2.

Actores similares

blackwaterransomware · 11clearwateractor · 1MuddyWaterapt · 1muddywateractor · 1Water Labbuapt · 0Water Gamayunapt · 0Water Saciapt · 0Water Barghestapt · 0SHADOW-WATER-063apt · 0Water Curupiraapt · 0