Ankura CTIX FLASH Update - May 23, 2025

Malware Activity

Disruption of Lumma Infostealer and Rise of 3AM Ransomware

In a concerted international effort involving agencies such as the FBI and Europol, authorities successfully dismantled the widespread Lumma infostealer malware network by seizing over 2,300 domains associated with its operations. This notorious malware had been systematically harvesting sensitive user data, including login credentials, financial details, and personal information, from victims across various sectors. Causing significant concerns over data breaches and financial theft. The takedown involved tracing the malware's infrastructure and shutting down key command and control servers. Effectively crippling its operational capacity and sending a strong message about the power of global collaboration in cybersecurity enforcement. Concurrently, the emergence of the highly sophisticated 3AM ransomware group highlights the evolving landscape of cyber threats. This threat actor employs