The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have warned of active LummaC2 malware campaigns attacking the nation’s critical infrastructure. The malware aims to exploit security gaps to steal data such as credentials and financial records. Authorities urge organizations to take recommended mitigation measures. Concurrently, five internet domains linked to the malware operation have been seized, marking a step in disrupting the malware’s worldwide reach.

Microsoft takes legal action against Lumma Stealer after 400,000 devices infected
The US Department of Justice (DoJ), in cooperation with the FBI and Microsoft, has seized multiple domains used to deploy the infostealing malware, Lumma Stealer.