Once-hobbled Lumma Stealer is back with lures that are hard to resist

Lumma Stealer malware has resurged after law enforcement seized 2,300 domains in May 2025. The infostealer, which infected nearly 395,000 Windows computers before the takedown, is now spreading again using ClickFix social engineering lures—fake CAPTCHAs that trick users into pasting malicious commands into Windows terminal. The Show more