Excerpt
The takedown achieved a significant disruption to Lumma infostealers’ infrastructure, but likely didn’t permanently affect most of its Russia-hosted infrastructure.
Lumma’s developers are undertaking significant efforts to reinstate the activity and to conduct business as usual.
There seems to be a significant reputational damage to the Lumma infostealer, and the key factor for the infostealer to resume regular activity will be the reputational factors (rather than the technological). On May 21, 2025, Europol, FBI, and Microsoft, in collaboration with other public and private sector partners, announced an operation to dismantle the activity of th…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Check Point on blog.checkpoint.com.
Mentioned in the excerpt
More from Check Point88
- Gozi: The Malware with a Thousand FacesCheck Point · Published 28 Aug 2020
- Shattering the Dream - When a Job Offer Becomes a Zero-Day AttackCheck Point · Published 11 Aug
- Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution EcosystemCheck Point · Published 3 Jun
- Cavern Manticore: Exposing Iran-Linked Modular C2 FrameworkCheck Point · Published 6 Jul
On the same topics
- StealC Is Back, and This Time It's a RATVaronis · Published 22 Oct
- U.S. Joins International Action Against RedLine and META InfostealersUS Department of Justice · Published 28 Oct 2024
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
- Taking Down EmotetTeam Cymru · Published 27 Jan 2021
