"Extensive LofyGang Hacking Group Targets Credit Card, Disney+, Minecraft, Discord Credentials"
LofyGang, a newly discovered threat group, has been conducting various hacking operations since its start more than a year ago. According to a Checkmarx report, more than 200 malicious packages with thousands of installations have been linked to LofyGang this year alone, targeting not only credit card information but also credentials for Disney+, Minecraft, and premium Discord accounts. LofyGang has also been linked to software supply chain attacks. The report also revealed that LofyGang's hacking tools are being promoted on a GitHub page. Researchers describe LofyGang as an organized crime group that creates "sock-puppet" accounts by using a closed dictionary of names with slight variations of keywords such as lofy, life, polar, panda, Kakau, evil, devil, and vilo. As much of the evidence contained Brazilian Portuguese sentences and even a file called "brazil.js," the researchers concluded that LofyGang originated in Brazil. This article continues to discuss findigns regarding the LofyGang hacking group.