Deep Tide TechFlow News, January 6, according to Karol Paciorek, a member of the cybersecurity team CSIRT KNF, Lumma Stealer uses C2 camouflage through Steam configuration files to hide domains, using fake websites impersonating cryptocurrency exchanges to deceive victims.