- DOJ announced to seize several domains used by Lumma Stealer
- InfoTeals are attached to some of the biggest cyberattacks in recent times
- Malware caused millions of dollars in damage
The US Department of Justice, along with the FBI and Microsoft, disturbed the operation of Lumma Stealer, one of the largest information-stealing malware variants out there.
In a press release published on DOJ’s website earlier this week, it was explained that the law enforcement authorities seized five Internet domains used to implement Lummac2. The threat actors tried to move their operations and create three new domains, which were also picked up by DOJ.
In addition, Microsoft independently took 2,300 additional internet domains associated with Lummac2’s criminal activities.
High -profile attacks
Lumma Stealer is a popular infoTealer that grabs sensitive information such as login -credentials, browser -auto -mill information and cryptocurrency -tejtogdata. It is usually distributed through malicious sites and phishing campaigns and was seen in several high-profile cyberattacks. The seized domains were used by different cyber criminals to access and later insert infoTeals.
The FBI said malware was used in at least 1.7 million cases since the end of 2023 and resulted in approx. 10 million infections. These infections resulted in losses of more than $ 36 million in 2023 alone. DOJ now offers a $ 10 million bounty for information on cyberattacks against US infrastructure, performed by foreign state -sponsored threat players.
Lumma was involved in many high -profile cyber criminal cases, including the attack against Schneider Electric, which happened in early November 2024. In this case, scientists from Hudson Rock found the criminals behind the attack to have stolen “critical data”, including projects, problems and plugins along with 400,000 rows of user data, in more than 40 GB compressed data.
The same infoTeals were apparently also used to steal the credentials that were later exploited to break into people’s snowflake shell accounts, which triggered one of the major supply chain attacks in recent times.
Via Registered
