Published by Global Banking & Finance Review®
Posted on May 21, 2025
1 min readLast updated: January 23, 2026
Add as preferred source on GoogleMicrosoft's DCU takes legal action against Lumma Stealer malware, affecting 400,000 PCs globally, highlighting the need for cybersecurity collaboration.
(Reuters) -Microsoft said on Wednesday its Digital Crimes Unit (DCU) filed a legal action against Lumma Stealer last week, after it found nearly 400,000 Windows computers globally infected by the information-stealing malware in the past two months.
Lumma is capable of stealing data from various browsers and applications, such as cryptocurrency wallets, and installing other malware, the company said in a blog.
Microsoft's DCU helped in the "takedown, suspension, and blocking of malicious domains that formed the backbone of Lumma's infrastructure," via a court order from the U.S. District Court of the Northern District of Georgia, the blog said.
The U.S. Department of Justice seized the central command structure for Lumma and disrupted marketplaces where the tool was sold to cybercriminals.
"The growth and resilience of Lumma Stealer highlight the broader evolution of cybercrime and underscores the need for layered defenses and industry collaboration to counter threats," Microsoft said in a separate blog post on the malware.
(Reporting by Juby Babu in Mexico City; Editing by Alan Barona)
Microsoft's Digital Crimes Unit filed a legal action against Lumma Stealer after discovering nearly 400,000 infected Windows computers worldwide.
Lumma Stealer can steal data from various browsers and applications, including cryptocurrency wallets, and can also install additional malware.
The U.S. Department of Justice seized Lumma's central command structure and disrupted marketplaces where the malware was sold to cybercriminals.
Microsoft stated that the growth and resilience of Lumma Stealer highlight the broader evolution of cybercrime and emphasize the need for layered defenses and industry collaboration.
Microsoft's Digital Crimes Unit assisted in the takedown, suspension, and blocking of malicious domains that were integral to Lumma's infrastructure through a court order.
Explore more articles in the Headlines category
