Archive — US — techcrunch
Microsoft says Lumma password stealer malware found on 394,000 Windows PCs
Microsoft, with law enforcement, has disrupted the Lumma password stealer malware, affecting over 394,000 Windows PCs globally, primarily in Brazil, Europe, and the U.S. They initiated court action to seize 2,300 malicious domains. Lumma not only steals sensitive data but also enables installation of additional malware, linking it to significant cyberattacks on companies such as PowerSchool.
Key points
- Lumma malware identified on 394,000 Windows PCs, predominantly in Brazil, Europe, and the U.S.
- Microsoft and law enforcement executed a court-authorized takedown and seized 2,300 domains associated with Lumma.
- The malware is typically found in pirated games or apps.
- Lumma steals sensitive information like logins, credit cards, and cryptocurrency wallets, which are sold on the dark web.
- It also acts as a backdoor for additional malware, including ransomware.
- Lumma has connections to significant data breaches in notable tech firms.
Why it matters
- The rise of password-stealer malware showcases the growing cybersecurity threats faced by users, especially with increased online activities due to remote work.
- Historical data shows a spike in malware attacks during major global events, reflecting an evolving cyber landscape.
- Cybersecurity remains a top IT trend, as organizations face heightened scrutiny to protect sensitive data from pervasive threats.
The disruption of the Lumma malware highlights urgent cybersecurity issues and reinforces the importance of protective measures as cyber threats continue to evolve.