Skip to content
corpus.blogBeta
Sign in Claim your blog
Record · blogs.microsoft.com

Disrupting Lumma Stealer: Microsoft leads global action against favored cybercrime tool

blogs.microsoft.com · 21 May 2025 · 5 min read

A post on blogs.microsoft.com, published 21 May 2025, is cited by 5 distinct blogs to date (corpus.blog, measured 16 October 2026).

A record is what was published and who pointed at it. The text of the post is not shown here: read it at the source, or at its Wayback capture.

Read at blogs.microsoft.com (opens in a new tab) Wayback capture (opens in a new tab)

5blogs citing

Citing blogs and links by period
Period Blogs Links
All time510
Last 90 days00
Last 30 days00
Last 7 days00
Figures for this page
First cited22 May 2025
Latest citation16 Apr 2026
Words blogs link it with5
Linked with its own title1 of 5 blogs
External links23
Length930
New citing blogs a weeksince May 2025
New citing blogs a week, since May 2025: 74 weeks, peak 1 a week, latest week 0

0 this week (still settling) · peak 1

Show as table
New citing blogs a week, week by week
Week of Value
19 May 20251
26 May 20250
2 Jun 20250
9 Jun 20250
16 Jun 20251
23 Jun 20250
30 Jun 20250
7 Jul 20250
14 Jul 20251
21 Jul 20250
28 Jul 20250
4 Aug 20250
11 Aug 20250
18 Aug 20250
25 Aug 20250
1 Sept 20250
8 Sept 20250
15 Sept 20250
22 Sept 20250
29 Sept 20250
6 Oct 20250
13 Oct 20250
20 Oct 20250
27 Oct 20250
3 Nov 20250
10 Nov 20250
17 Nov 20250
24 Nov 20250
1 Dec 20250
8 Dec 20250
15 Dec 20250
22 Dec 20250
29 Dec 20250
5 Jan 20260
12 Jan 20260
19 Jan 20260
26 Jan 20260
2 Feb 20260
9 Feb 20260
16 Feb 20260
23 Feb 20261
2 Mar 20260
9 Mar 20260
16 Mar 20260
23 Mar 20260
30 Mar 20261
6 Apr 20260
13 Apr 20260
20 Apr 20260
27 Apr 20260
4 May 20260
11 May 20260
18 May 20260
25 May 20260
1 Jun 20260
8 Jun 20260
15 Jun 20260
22 Jun 20260
29 Jun 20260
6 Jul 20260
13 Jul 20260
20 Jul 20260
27 Jul 20260
3 Aug 20260
10 Aug 20260
17 Aug 20260
24 Aug 20260
31 Aug 20260
7 Sept 20260
14 Sept 20260
21 Sept 20260
28 Sept 20260 (still settling)
5 Oct 20260 (still settling)
12 Oct 20260 (still settling)

Each blog counts once, in the week of its first citation. A blog added to the index recently can bring old first citations in at once.

Who cited it

Beta

Cited by 5 blogs across 1 subject: technology 5.

Words blogs link it with

The words blogs link this page with, by how many different blogs use them.

  • disruption2 blogs
  • sinkholing1 blog
  • takedown1 blog
  • court order1 blog
  • disrupting lumma stealer: microsoft leads global action against favored cybercrime tool1 blog

Cited by 5 blogs in 10 posts

One row per blog, the most recently citing first. Each shows the blog's newest citing post; open a row for the others.

Recorded Future3 posts
Panorama do cibercrime na América Latina e Caribe

linked as “redirecionamento de tráfego (sinkholing)”

Read at recordedfuture.com (opens in a new tab)
16 Apr 2026
2 other posts
Panorama del cibercrimen en América Latina y el Caribe

linked as “sinkholing”

Read at recordedfuture.com (opens in a new tab)
16 Apr 2026
Latin America and the Caribbean Cybercrime Landscape

linked as “sinkholing”

Read at recordedfuture.com (opens in a new tab)
1 Apr 2026
blog.chainalysis.com2 posts
ランサムウェアの身代金総額が2年連続で停滞、攻撃件数は急増

linked as “テイクダウン”

Read at blog.chainalysis.com (opens in a new tab)
26 Feb 2026
1 other post
Total Ransomware Payments Stagnate for Second Consecutive Year, While Attacks Escalate

linked as “disruption”

Read at chainalysis.com (opens in a new tab)
26 Feb 2026
Red Canary3 posts
Intelligence Insights: August 2025

linked as “takedown”

Read at redcanary.com (opens in a new tab)
21 Aug 2025
2 other posts
Intelligence Insights: July 2025

linked as “takedown”

Read at redcanary.com (opens in a new tab)
24 Jul 2025
Intelligence Insights: June 2025

linked as “disruption”

Read at redcanary.com (opens in a new tab)
18 Jun 2025
Intel 4711 post
Threat hunting case study: Lumma infostealer

linked as “court order”

Read at intel471.com (opens in a new tab)
17 Jul 2025
borncity.com1 post
Law enforcement officials seized Lumma Stealer infrastructure (May 2025)

linked as “Disrupting Lumma Stealer: Microsoft leads global action against favored cybercrime tool”

Read at borncity.com (opens in a new tab)
22 May 2025

Links from this post

Link
https://aka.ms/Lumma-Stealer Who cites this page
aka.ms
https://www.justice.gov/opa/pr/justice-department-seizes-domains-behind-major-information-stealing-malware-operation Who cites this page
justice.gov
https://www.europol.europa.eu/media-press/newsroom/news/europol-and-microsoft-disrupt-world%E2%80%99s-largest-infostealer-lumma Who cites this page
europol.europa.eu
https://www.jc3.or.jp/
jc3.or.jp
https://www.microsoft.com/en-us/security/blog/2022/05/09/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself/?msockid=356b7a12f0156be706e16f23f1386a52
microsoft.com
Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction Read at microsoft.com (opens in a new tab)
microsoft.com
https://www.microsoft.com/en-us/security/blog/2025/03/13/phishing-campaign-impersonates-booking-com-delivers-a-suite-of-credential-stealing-malware/?msockid=356b7a12f0156be706e16f23f1386a52
microsoft.com
https://www.fortinet.com/blog/threat-research/lumma-variant-on-youtube Who cites this page
fortinet.com
https://www.bitdefender.com/en-us/blog/hotforsecurity/lumma-stealer-campaign-targets-league-of-legends-world-championship-fans-through-social-media-ads Who cites this page
bitdefender.com
https://www.hendryadrian.com/lumma-stealer-chronicles-pdf-themed-campaign-using-compromised-educational-institutions-infrastructure-cloudsek/
hendryadrian.com
https://any.run/cybersecurity-blog/manufacturing-companies-targeted-with-lumma/ Who cites this page
any.run
https://clickcontrol.com/cyber-crime/global-alert-deceptive-captcha-scam-unleashes-dangerous-lumma-malware-across-industries/
clickcontrol.com
https://thehackernews.com/2024/09/transportation-companies-hit-by.html Who cites this page
thehackernews.com
https://hivepro.com/threat-advisory/malware-as-a-service-in-action-lumma-stealers-expanding-attack-methods/
hivepro.com
https://www.microsoft.com/en-us/security/blog/2025/03/13/phishing-campaign-impersonates-booking-com-delivers-a-suite-of-credential-stealing-malware/?msockid=304b0e202ece653723e31af92f096485
microsoft.com
https://www.darktrace.com/blog/the-rise-of-the-lumma-info-stealer Who cites this page
darktrace.com
https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-lummac2-94111d4b1e11
g0njxa.medium.com
https://www.welivesecurity.com/en/eset-research/eset-takes-part-global-operation-disrupt-lumma-stealer/ Who cites this page
welivesecurity.com
https://www.bitsight.com/blog/lumma-stealer-is-out-of-business Who cites this page
bitsight.com
https://www.lumen.com/en-us/solutions/connected-security.html Who cites this page
lumen.com
https://cloudflare.com/threat-intelligence/research/report/cloudflare-participates-in-joint-operation-to-disrupt-lumma-stealer/ Who cites this page
cloudflare.com
https://cleandns.com/battling-lumma-stealer-malware/ Who cites this page
cleandns.com
https://www.gmoregistry.com/en/ Who cites this page
gmoregistry.com

Looking for more like this? Find posts and blogs like it
Something wrong here? Report a problem