Story perspectives

Microsoft Disrupts Lumma Stealer, Protects 394K Devices

5/22/2025

25 5

Summary

Story summary

Microsoft and U.S. authorities disrupted Lumma Stealer, a malware affecting over 394,000 Windows devices worldwide.
The operation seized 2,300 domains and dismantled Lumma's infrastructure, targeting its Russian developer, "Shamel."
Lumma has caused significant financial losses, including $36.5 million in credit card theft in 2023.
This coordinated effort involved international law enforcement and tech companies to combat cybercrime and protect victims.

History

Historical Context

Microsoft's disruption of Lumma Stealer highlights the ongoing battle against cybercrime, echoing past efforts like the takedown of the Zeus botnet in 2010. As malware evolves, the rise of "stealer-as-a-service" models has made cybercrime more accessible, reminiscent of the proliferation of ransomware in the mid-2010s. This collaboration between tech firms and law enforcement reflects a growing recognition of cyber threats' global impact.

1 of 2

Story summary

Microsoft and U.S. authorities disrupted Lumma Stealer, a malware affecting over 394,000 Windows devices worldwide.
The operation seized 2,300 domains and dismantled Lumma's infrastructure, targeting its Russian developer, "Shamel."
Lumma has caused significant financial losses, including $36.5 million in credit card theft in 2023.
This coordinated effort involved international law enforcement and tech companies to combat cybercrime and protect victims.

1 / 2