Microsoft has discovered over 390,000 Windows PCs infected with Lumma malware, a highly dangerous program that steals user information for ransom. This malware is hard to detect, easy to distribute, and can impersonate well-known brands to deliver phishing emails. Microsoft recommends enabling multi-factor authentication and avoiding clicking on attachments or links from unknown or suspicious senders to prevent infection.

Destructive malware available in NPM repo went unnoticed for 2 years
Malicious payloads were set to detonate on certain 2023 dates, but others had ongoing threats with no termination date. Despite activation dates having passed, any