The malware often hides behind fake CAPTCHAs and has been used to commit financial fraud. Microsoft took down 2,300 domains that ran it and updated Defender to identify it.

Between March and May 2025, Microsoft found more than 394,000 computers infected with Lumma Stealer worldwide. Over 1,300 of ...