Global Cybercrime Bust: Lumma Malware’s Reign of Terror Ends with a Microsoft-DOJ Takedown
The Justice Department and Microsoft, along with global partners, have seized Lumma malware’s command structure. This info-stealer, a cybercriminal favorite, targets account passwords and banking info. Microsoft found 394,000 infected computers globally. With Lumma’s easy dark web access, even tech novices can join the cybercrime party—just BYO malware.

Hot Take:
Well, well, well… looks like the cybercriminals’ party got busted by the FBI’s version of a SWAT team, with a little help from Microsoft and friends. The Lumma malware, which was the cyber equivalent of a Swiss Army knife for digital pickpockets, has been taken down. It’s like the Justice League of cybersecurity came together to give cybercriminals a taste of their own medicine. Who knew malware takedowns could be so dramatic?
Key Points:
- The Justice Department, with Microsoft and other partners, shut down Lumma malware’s operations.
- Lumma, active since 2022, is favored by cybercriminals for stealing sensitive data.
- The takedown was authorized by the U.S. District Court of the Northern District of Georgia.
- High concentrations of Lumma infections found in the U.S., South America, Europe, and Asia.
- Lumma is sold as malware-as-a-service by a developer known as “Shamel” from Russia.