Lumma information stealer infrastructure disrupted

The U.S. Department of Justice and Microsoft disrupted the Lumma infostealer (LummaC/LummaC2) by seizing about 2,300 domains used as user panels for this MaaS operation that has infected hundreds of thousands to millions of systems; Lumma steals credentials, cookies, autofill data, FTP/email data, 2FA tokens/backup codes, and cryptocurrency wallets. The takedown redirects domains to Microsoft-controlled sinkholes for monitoring, and the report advises users to employ strong unique passwords, MFA, updated software, anti-malware, and cautious handling of emails and downloads.