{"id":2084,"date":"2025-06-01T21:47:14","date_gmt":"2025-06-01T16:17:14","guid":{"rendered":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/"},"modified":"2025-06-01T21:47:14","modified_gmt":"2025-06-01T16:17:14","slug":"microsoft-takes-down-malware-found-on-394000-windows-pcs","status":"publish","type":"post","link":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/","title":{"rendered":"Microsoft takes down malware found on 394,000 Windows PCs"},"content":{"rendered":"
<\/div>

Infostealer malware has been on the rise recently, and that’s evident from the\u00a0billions of user records leaked online in the past year alone<\/u><\/a>. This type of malware targets everything from your name, phone number and address to financial details and cryptocurrency. Leading the charge is the Lumma infostealer.<\/p>\n

I have been reporting on this malware since last year, and security researchers have called it one of the most dangerous infostealers, infecting millions. There have been countless incidents of Lumma targeting people’s personal data (more on this later), but the good news is that Microsoft has taken it down.<\/p>\n

The Redmond-based company announced it has dismantled the Lumma Stealer malware operation with the help of law enforcement agencies around the world.<\/p>\n

Join The FREE CyberGuy Report<\/u><\/strong>: Get my expert tech tips, critical security alerts, and exclusive deals – plus instant access to my\u00a0<\/u>free Ultimate Scam Survival Guide<\/u><\/strong> when you sign up!<\/u><\/a>\u00a0<\/p>\n

Microsoft confirmed that it has successfully taken down the Lumma Stealer malware network in collaboration with law enforcement agencies around the world. In a\u00a0blog post<\/u><\/a>, the company revealed that its Digital Crimes Unit had tracked infections on more than 394,000 Windows devices globally between March 16 and May 16.<\/p>\n

Lumma was a go-to tool for cybercriminals, often used to siphon sensitive information like login credentials, credit card numbers, bank account details and cryptocurrency wallet data. The malware\u2019s reach and impact made it a favored choice among threat actors for financial theft and data breaches.<\/p>\n

MASSIVE DATA BREACH EXPOSES 184 MILLION PASSWORDS AND LOGINS<\/strong><\/a><\/p>\n

To disrupt the malware\u2019s operation, Microsoft obtained a court order from the U.S. District Court for the Northern District of Georgia, which allowed the company to take down key domains that supported Lumma\u2019s infrastructure. This was followed by the U.S. Department of Justice stepping in to seize control of Lumma\u2019s core command system and shut down marketplaces where the malware was being sold.<\/p>\n

International cooperation played a major role as well. Japan\u2019s cybercrime unit<\/a> helped dismantle Lumma\u2019s locally hosted infrastructure, while Europol assisted in actions against hundreds of domains used in the operation. In total, over 1,300 domains were seized or redirected to Microsoft-managed sinkholes to prevent further damage.<\/p>\n

Microsoft says this takedown effort also included support from industry partners such as Cloudflare, Bitsight and Lumen, which helped dismantle the broader ecosystem that enabled Lumma to thrive.<\/p>\n

NEW MALWARE EXPLOITS FAKE UPDATES TO STEAL DATA<\/u><\/strong><\/a><\/p>\n

Lumma is a Malware-as-a-Service (MaaS) that has been marketed and sold through underground forums since at least 2022. Over the years, its developers have released multiple versions to continually improve its capabilities. I first reported on Lumma in February 2024, when it was\u00a0used by hackers to access Google accounts<\/u><\/a> using expired cookies that contained login information.<\/p>\n

Lumma\u00a0continued targeting users<\/u><\/a>, with reports in October 2024 revealing it was\u00a0impersonating fake human verification pages<\/u><\/a> to trick Windows users into sharing sensitive information. The malware wasn\u2019t limited to Windows. In January 2024, security researchers found the infostealer malware was\u00a0targeting 100 million Mac users<\/u><\/a>, stealing browser credentials, cryptocurrency wallets and other personal data.<\/p>\n

HOW TO REMOVE MALWARE ON A PC (2025)<\/u><\/strong><\/a><\/p>\n

To protect yourself from the evolving threat of infostealer malware, which continues to target users through sophisticated social engineering tactics, consider taking these six essential security measures:<\/p>\n

1. Be skeptical of CAPTCHA prompts:<\/strong> Legitimate CAPTCHA tests never require you to press Windows + R, copy commands or paste anything into PowerShell. If a website instructs you to do this, it\u2019s likely a scam. Close the page immediately and avoid interacting with it.<\/p>\n

2. Don\u2019t click links from unverified emails and use strong antivirus software:\u00a0<\/strong>Many infostealer attacks start with phishing emails that impersonate trusted services. Always verify the sender before clicking on links. If an email seems urgent or unexpected, go directly to the company\u2019s official website instead of clicking any links inside the email.<\/p>\n

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices<\/u><\/a>.\u00a0<\/strong><\/p>\n

3. Enable two-factor authentication:\u00a0<\/strong>Enable two-factor authentication<\/u><\/a> (2FA) whenever possible. This adds an extra layer of security by requiring a second form of verification, such as a code sent to your phone, in addition to your password.<\/p>\n

4. Keep devices updated:<\/strong> Regularly\u00a0updating your operating system, browser and security software<\/u><\/a> ensures you have the latest patches against known vulnerabilities. Cybercriminals exploit outdated systems, so enabling automatic updates is a simple but effective way to stay protected.<\/p>\n

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?<\/strong><\/a><\/p>\n

5. Monitor your accounts for suspicious activity and change your passwords:\u00a0<\/strong>If you\u2019ve interacted with a suspicious website, phishing email or fake login page, check your online accounts for any unusual activity. Look for unexpected login attempts, unauthorized password resets or financial transactions that you don\u2019t recognize. If anything seems off, change your passwords immediately and report the activity to the relevant service provider. Also, consider using a\u00a0password manager<\/u><\/a> to generate and store complex passwords. Get more details about my\u00a0best expert-reviewed Password Managers of 2025 here.<\/u><\/a><\/p>\n

6. Invest in a personal data removal service:<\/strong> Consider using a service that monitors your personal information and alerts you to potential breaches or unauthorized use of your data. These services can provide early warning signs of identity theft or other malicious activities resulting from infostealer malware or similar attacks. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time.\u00a0\u200b<\/strong>Check out my top picks for data removal services here.\u00a0<\/u><\/a><\/p>\n

Get a\u00a0free scan\u00a0<\/u><\/a>to find out if your personal information is already out on the web.<\/p>\n

MALWARE STEALS BANK CARDS AND PASSWORDS FROM MILLIONS OF DEVICES<\/u><\/strong><\/a><\/p>\n

Microsoft\u2019s takedown of the Lumma Stealer<\/a> malware network is a major win in the fight against infostealers, which have fueled a surge in data breaches over the past year. Lumma had become a go-to tool for cybercriminals, targeting everything from browser credentials to crypto wallets across Windows and Mac systems<\/a>. I\u2019ve been tracking this malware since early 2024, and its ability to impersonate human verification pages and abuse expired cookies made it especially dangerous.<\/p>\n

Do you feel tech companies are doing enough to protect users from malware like this? Let us know by writing us at\u00a0<\/strong>Cyberguy.com\/Contact<\/u><\/strong><\/a><\/p>\n

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to\u00a0Cyberguy.com\/Newsletter<\/u><\/strong><\/a><\/p>\n

Ask Kurt a question or let us know what stories you’d like us to cover<\/u><\/a><\/p>\n

Follow Kurt on his social channels<\/p>\n

Answers to the most asked CyberGuy questions:<\/p>\n

New from Kurt:<\/p>\n

Copyright 2025 CyberGuy.com.\u00a0 All rights reserved.\u00a0\u00a0<\/p>","protected":false},"excerpt":{"rendered":"

Infostealer malware has been on the rise recently, and that’s evident from the\u00a0billions of user records leaked online in the past year alone. This type of…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"footnotes":""},"categories":[9],"tags":[],"class_list":["post-2084","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech"],"yoast_head":"\nMicrosoft takes down malware found on 394,000 Windows PCs - Leading the AI News Frontier<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft takes down malware found on 394,000 Windows PCs - Leading the AI News Frontier\" \/>\n<meta property=\"og:description\" content=\"Infostealer malware has been on the rise recently, and that’s evident from the\u00a0billions of user records leaked online in the past year alone. This type of…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/\" \/>\n<meta property=\"og:site_name\" content=\"Leading the AI News Frontier\" \/>\n<meta property=\"article:published_time\" content=\"2025-06-01T16:17:14+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/ainews.prativad.com\/#\/schema\/person\/f939c39aa47576860d0236de03d92109\"},\"headline\":\"Microsoft takes down malware found on 394,000 Windows PCs\",\"datePublished\":\"2025-06-01T16:17:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/\"},\"wordCount\":1172,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/ainews.prativad.com\/#organization\"},\"articleSection\":[\"Tech\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/\",\"url\":\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/\",\"name\":\"Microsoft takes down malware found on 394,000 Windows PCs - Leading the AI News Frontier\",\"isPartOf\":{\"@id\":\"https:\/\/ainews.prativad.com\/#website\"},\"datePublished\":\"2025-06-01T16:17:14+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/ainews.prativad.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft takes down malware found on 394,000 Windows PCs\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ainews.prativad.com\/#website\",\"url\":\"https:\/\/ainews.prativad.com\/\",\"name\":\"Leading the AI News Frontier\",\"description\":\"Empowering You with AI Intelligence\",\"publisher\":{\"@id\":\"https:\/\/ainews.prativad.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ainews.prativad.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/ainews.prativad.com\/#organization\",\"name\":\"Leading the AI News Frontier\",\"url\":\"https:\/\/ainews.prativad.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/ainews.prativad.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/ainews.prativad.com\/wp-content\/uploads\/2024\/09\/AInews.png\",\"contentUrl\":\"https:\/\/ainews.prativad.com\/wp-content\/uploads\/2024\/09\/AInews.png\",\"width\":300,\"height\":72,\"caption\":\"Leading the AI News Frontier\"},\"image\":{\"@id\":\"https:\/\/ainews.prativad.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/ainews.prativad.com\/#\/schema\/person\/f939c39aa47576860d0236de03d92109\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/e1a3cd2a786fa91b6ef0a32f79100bce09ca647b35c4fd9c7ae06d11101b31a4?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e1a3cd2a786fa91b6ef0a32f79100bce09ca647b35c4fd9c7ae06d11101b31a4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e1a3cd2a786fa91b6ef0a32f79100bce09ca647b35c4fd9c7ae06d11101b31a4?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/ainews.prativad.com\"],\"url\":\"https:\/\/ainews.prativad.com\/index.php\/author\/prativadainews\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft takes down malware found on 394,000 Windows PCs - Leading the AI News Frontier","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft takes down malware found on 394,000 Windows PCs - Leading the AI News Frontier","og_description":"Infostealer malware has been on the rise recently, and that’s evident from the\u00a0billions of user records leaked online in the past year alone. This type of…","og_url":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/","og_site_name":"Leading the AI News Frontier","article_published_time":"2025-06-01T16:17:14+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/#article","isPartOf":{"@id":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/"},"author":{"name":"admin","@id":"https:\/\/ainews.prativad.com\/#\/schema\/person\/f939c39aa47576860d0236de03d92109"},"headline":"Microsoft takes down malware found on 394,000 Windows PCs","datePublished":"2025-06-01T16:17:14+00:00","mainEntityOfPage":{"@id":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/"},"wordCount":1172,"commentCount":0,"publisher":{"@id":"https:\/\/ainews.prativad.com\/#organization"},"articleSection":["Tech"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/","url":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/","name":"Microsoft takes down malware found on 394,000 Windows PCs - Leading the AI News Frontier","isPartOf":{"@id":"https:\/\/ainews.prativad.com\/#website"},"datePublished":"2025-06-01T16:17:14+00:00","breadcrumb":{"@id":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ainews.prativad.com\/index.php\/microsoft-takes-down-malware-found-on-394000-windows-pcs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ainews.prativad.com\/"},{"@type":"ListItem","position":2,"name":"Microsoft takes down malware found on 394,000 Windows PCs"}]},{"@type":"WebSite","@id":"https:\/\/ainews.prativad.com\/#website","url":"https:\/\/ainews.prativad.com\/","name":"Leading the AI News Frontier","description":"Empowering You with AI Intelligence","publisher":{"@id":"https:\/\/ainews.prativad.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ainews.prativad.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ainews.prativad.com\/#organization","name":"Leading the AI News Frontier","url":"https:\/\/ainews.prativad.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ainews.prativad.com\/#\/schema\/logo\/image\/","url":"https:\/\/ainews.prativad.com\/wp-content\/uploads\/2024\/09\/AInews.png","contentUrl":"https:\/\/ainews.prativad.com\/wp-content\/uploads\/2024\/09\/AInews.png","width":300,"height":72,"caption":"Leading the AI News Frontier"},"image":{"@id":"https:\/\/ainews.prativad.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/ainews.prativad.com\/#\/schema\/person\/f939c39aa47576860d0236de03d92109","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/e1a3cd2a786fa91b6ef0a32f79100bce09ca647b35c4fd9c7ae06d11101b31a4?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e1a3cd2a786fa91b6ef0a32f79100bce09ca647b35c4fd9c7ae06d11101b31a4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e1a3cd2a786fa91b6ef0a32f79100bce09ca647b35c4fd9c7ae06d11101b31a4?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/ainews.prativad.com"],"url":"https:\/\/ainews.prativad.com\/index.php\/author\/prativadainews\/"}]}},"_links":{"self":[{"href":"https:\/\/ainews.prativad.com\/index.php\/wp-json\/wp\/v2\/posts\/2084","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ainews.prativad.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ainews.prativad.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ainews.prativad.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ainews.prativad.com\/index.php\/wp-json\/wp\/v2\/comments?post=2084"}],"version-history":[{"count":0,"href":"https:\/\/ainews.prativad.com\/index.php\/wp-json\/wp\/v2\/posts\/2084\/revisions"}],"wp:attachment":[{"href":"https:\/\/ainews.prativad.com\/index.php\/wp-json\/wp\/v2\/media?parent=2084"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ainews.prativad.com\/index.php\/wp-json\/wp\/v2\/categories?post=2084"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ainews.prativad.com\/index.php\/wp-json\/wp\/v2\/tags?post=2084"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}