Microsoft legal action has escalated as the tech giant disrupts a massive malware operation known as Lumma Stealer.
The company recently announced it had secured a federal court order in Georgia, authorizing action against nearly 2,300 websites linked to the malware. These sites formed a core part of Lumma’s infrastructure, enabling data theft from unsuspecting users. Microsoft collaborated with law enforcement and cybercrime units globally to dismantle the malware’s network and block its future operations.
The US Department of Justice worked alongside Microsoft’s digital crimes unit to dismantle Lumma’s command center. The operation also targeted underground forums where Lumma was being sold to cybercriminals. Since emerging in 2022, Lumma has undergone constant evolution, making it a persistent threat.
Microsoft reported that between March and May 2024, over 394,000 Windows devices had been infected. The malware harvested sensitive data, including login credentials, crypto wallet access, and financial information.
Malware takedown hits crypto theft ecosystem
Europol and Japan’s Cybercrime Control Center also played key roles in disabling locally hosted Lumma assets. Their cooperation highlights the increasing international effort required to fight malware and protect users.
Lumma Stealer wasn’t just targeting random passwords—it had a serious focus on crypto wallets. This made it especially dangerous in the booming Web3 and decentralized finance ecosystems. Crypto users have become a primary target, and tools like Lumma are designed to exploit weaknesses across both individuals and organizations.
Meanwhile, crypto drainers—malware engineered to extract crypto from wallets—have emerged as a widespread threat. These drainers are now offered as Software-as-a-Service (SaaS), enabling even low-level criminals to deploy them for as little as $100.
ANOTHER MUST-READ ON ICN.LIVE:
Builder.ai financial troubles trigger insolvency proceedings despite Microsoft backing
Microsoft legal action highlights the rising danger of crypto-targeting malware
This latest Microsoft legal action fits into a broader context of increasing crypto-related cybercrime. A report by Chainalysis estimates that nearly $51 billion in crypto was stolen in 2024 alone through various fraudulent schemes.
Other malware threats also continue to surface. Chinese printer company Procolored was recently linked to Bitcoin-stealing software embedded in driver downloads. Victims lost close to $953,000 in that incident.
According to the FBI, Americans lost $9.3 billion through crypto fraud last year, with older users—those over 60—being particularly vulnerable. Professional hacking networks and even state-backed cybercrime groups have turned their attention to the digital asset space.
North Korean hackers alone have siphoned nearly $3 billion in crypto since 2017, often using advanced and evolving tactics. This trend signals that global cybersecurity must keep pace with the fast-growing and high-risk world of crypto.