Lumma Malware Infrastructure Seized in Global Operation – Coincu

Key Points:

  • Global operation dismantles Lumma malware targeting crypto wallets.
  • 2,300 domains seized through international collaboration.
  • Malware infected millions, bypassed security tools.

Global agencies have taken down LummaC2 infrastructure that targeted cryptocurrency wallets, involving 5 domains and over 2,300 sites.

The operation, led by the U.S. Department of Justice with Microsoft and multinational agencies, highlights vulnerability in digital currency security.

Global Operation Ends Lumma’s Reign: 2,300 Domains Seized

The LummaC2 malware infrastructure was seized in a coordinated global operation. The U.S. Department of Justice spearheaded the effort (Justice Department seizes domains linked to major malware operation), supported by Microsoft and international agencies, dismantling an extensive network targeting cryptocurrency wallets. Over 1.7 million attempts were thwarted, impacting security measures in major financial sectors. Expert statements emphasize the disruption’s significance, though concerns persist about potential regrouping efforts by cybercriminals.

Microsoft’s Digital Crimes Unit confirmed 2,300 malicious domains were seized, with contributions from Europol and Japanese agencies. Lumma’s takedown restricts a vital tool in infostealer malware, reflecting growing international collaboration in cybersecurity.

“The coordinated takedown of Lumma Stealer’s infrastructure marks a pivotal moment in combating the proliferation of MaaS platforms. Lumma Stealer, also known as LummaC2, has been a formidable tool in the cybercriminal arsenal, facilitating the theft of sensitive data, including credentials, financial information and cryptocurrency wallets from nearly 400,000 Windows systems globally between March and May 2025.” – Ensar Seker, Chief Information Security Officer at SOCRadar Cyber Threat Intelligence Inc.

Bitcoin Surges Amid Cybersecurity Advances and Market Optimism

Did you know? The Lumma malware incident resembles past cybersecurity operations where threat actors quickly adapt and regain footing, reflecting a persistent cycle in digital threat management.

As of May 22, 2025, Bitcoin’s market cap reached $2.21 trillion, dominating 63.23% of the market. Notable price changes over 30 days showed a 26.43% increase, reflecting optimistic market trends. Information from CoinMarketCap provides these specific metrics.

bitcoin-daily-chart-1071bitcoin-daily-chart-1071

Bitcoin(BTC), daily chart, screenshot on CoinMarketCap at 05:22 UTC on May 22, 2025. Source: CoinMarketCap

Coincu’s research suggests the disruption may incite advanced security protocols challenging future malware deployment. Data-driven approaches and international cooperation remain critical for effective digital threat management.

Source: https://coincu.com/339030-lumma-malware-global-operation/