Microsoft, in partnership with the U.S. Department of Justice, led a coordinated effort to dismantle the Lumma Stealer malware network, a significant cybercrime tool.
Over 394,000 Windows machines were infected by Lumma Stealer between March and mid-May 2025, leading to theft of login credentials and financial information.
With international assistance, Microsoft took down 2,300 malicious domains associated with Lumma's infrastructure, while the DOJ shut down five critical LummaC2 domains.
While the takedown is a blow to the Lumma malware empire, experts caution that such tools are rarely eradicated completely, emphasizing the importance of ongoing collaboration between industry and governments to combat cyber threats.