Deep Tide TechFlow news, on January 6, according to Karol Paciorek, a member of the cybersecurity team CSIRT KNF, Lumma Stealer uses C2 disguise through Steam configuration files to hide domains, using fake websites to impersonate cryptocurrency exchanges to deceive victims.