\u201cWe have worked with New Zealand government agencies and financial institutions to help protect their affected customers. However, there is a large group of users we are now contacting directly,\u201d he said.<\/p>\n
\u201cMalicious software like this is relatively common, but this is a very significant amount of New Zealanders that we know have been impacted by this and that\u2019s why we are doing the outreach at this scale.\u201d<\/p>\n
Lumma Steeler was designed to go undetected and typically infected devices using Microsoft Windows operating systems.<\/p>\n
\u201cThe malware\u2019s purpose is to give these cybercriminals information that might let them gain access to your account and ultimately these cyber criminals are looking to steal money,\u201d Jagusch said.<\/p>\n
\u201cThey might also use the information for further attacks … They might be able to create more tailored phishing emails against you and your family.\u201d<\/p>\n
Jagusch said it\u2019s unlikely the affected people were targeted.<\/p>\n
\u201cThese people would have unknowingly downloaded the software by clicking a link within a phishing email or downloading the software from a compromised website,\u201d he said.<\/p>\n
Jagusch added that Lumma Stealer was available for purchase on the dark web.<\/p>\n
\u201cThere has been a real commercialisation of the cyber crime industry, meaning that malware like this can be purchased by anyone, anywhere in the world,\u201d he said.<\/p>\n
The NCSC was alerted to the attack through an international threat sharing forum.<\/p>\n