Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
Microsoft and Health-ISAC have seized and redirected domains used by YAM Store, CoGUI and Iron Man, three components of a Chinese-language cybercrime marketplace that supplied criminals with accounts, phishing kits and infrastructure.
The action was based on an order from the US District Court for the Southern District of Florida. Health-ISAC joined the civil lawsuit after threat actors frequently leveraged the cybercrime infrastructure to target hospitals and healthcare organizations.
According to Microsoft, the three services were used to send more than one billion malicious messages since January 2026. The messages targeted consumers and over 75,000 organizations in more than 150 countries, and over 750 million of them were aimed at Microsoft customers. The operators made tens of millions of dollars.
The company has disabled over 20,000 accounts tied to YAM Store and is blocking more than 100,000 domains used for impersonation and fraud.
The investigation began in late 2025, when...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
