Authorities carry out global takedown of infostealer used by cybercriminals

image via Ars Technica

May 22, 2025, 4:00 PM

• •Global law enforcement agencies and tech companies disrupted the Lumma infostealer malware.
• •Lumma, developed in Russia, has been used by cybercriminals to steal various information.
• •Microsoft, Cloudflare, Europol, and Japan's Cybercrime Control Center were involved in the disruption.
• •Lumma's use has surged since 2020, often distributed through phishing attacks.
• •Infostealers like Lumma are becoming a central part of cyberattacks, even used by nation-state actors.

A coalition of global law enforcement agencies and tech companies, including Microsoft and Cloudflare, has successfully disrupted the Lumma infostealer malware, a tool used by cybercriminals to steal sensitive data. Lumma, developed in Russia, facilitated attacks that led to financial theft and data breaches. The disruption involved seizing infrastructure, taking down domains, and disrupting cybercriminal marketplaces. Despite this action, infostealers' prevalence suggests they will remain a threat, evolving into a central tool in cyberattacks, even for nation-state actors.

Read original article