A global operation disrupted the Lumma malware-as-a-service, seizing thousands of domains and infrastructure to stop its widespread data theft. This coordinated effort involved Microsoft, law enforcement agencies, and cybersecurity companies to weaken Lumma’s operations and slow its malware spread. #LummaStealer #CybercrimeMarketplace
Keypoints
- The Lumma malware targeting Windows and macOS was disrupted through international law enforcement cooperation.
- Over 394,000 Windows computers were identified as infected by Lumma malware globally between March and May 2025.
- Microsoft seized approximately 2,300 domains associated with Lumma, severing communication with infected systems.
- Lumma malware is rented via cybercrime marketplaces for $250 to $1,000, stealing credentials, banking info, and browsing data.
- Major companies like Cloudflare, ESET, and others collaborated to block Lumma’s infrastructure and prevent data exfiltration.