In May 2025, a global operation led by Microsoft, Europol, and the U.S. Department of Justice disrupted the Lumma Stealer malware network.
Despite the takedown, Lumma Stealer quickly resurfaced with new tactics like fake CAPTCHAs and malvertising.
The malware's subscription-based model fuels its rapid spread, with recent updates including evasion techniques against antivirus systems.
Experts emphasize the need for persistent international collaboration and advanced protections to combat the evolving threat of malware-as-a-service operations.