Microsoft Says Dangerous Malware Can Steal Your Passwords And Data From Windows PCs

News18

22-05-2025

Last Updated:
Microsoft has found over 390,000 Windows PCs infected with the dangerous Lumma malware that steal your information for ransom.
Microsoft's security division has identified a dangerous malware threat that has already infected thousands of Windows PCs across the world. The company claims it has identified the victims of the Lumma stealer malware with the help of law enforcement agencies who might have been targeted by the hackers to infect their PCs.
The effect of the Lumma malware has been reported from March 16 to May 16, 2025 where over 390,000 Windows computers were found to be infected by the dangerous malware.
What Is Lumma Malware And How Dangerous Is It?
The biggest highlight about Lumma malware is that it can be difficult to detect but very easy to distribute across machines. Microsoft says the malware threat has been around since 2022 and over the years it has evolved to become even more dangerous. It is usually sold through the underground forums, the company adds.
The other important aspect about Lumma malware attack form is that hackers use popular brands like Microsoft, impersonate and send phishing emails with the aim to infect the computers. It could be a simple feedback form from hotel booking platforms like Booking or even the popular Captcha code to identify you as a human.
Microsoft says the Lumma malware has become one of the favourite tools used by hackers who rely on it to steal passwords, credit card details and even crypto wallets.
The company is adamant that without the help of the US govt it would have been a challenge to get hold of the infected systems by taking control of the main base where the Lumma malware has operated from.
The fact that Microsoft needed assistance from the US Court, and Europol to find the culprits of the Lumma malware suggests the risks were widespread and the concerns have become high enough to target important entities across the world.
With the use of AI to build hacking tools becoming a common story, these cyber crime units are aware of monitoring their daily movements. Microsoft says the best way to protect themselves from malware like Lumma is to enable multi-factor authentication for all your accounts and email IDs, and more importantly, do not open or click on attachments or links from unknown or even suspicious senders.
First Published: