'What appears to be a simple scam message is often the visible end of a much larger transnational cybercriminal operation': Microsoft leads global takedown of phishing network which sent over a billion messages

https://cdn.mos.cms.futurecdn.net/CT482eMSRL8PagRtuBVYNd-2000-80.jpeg
  • Microsoft helped dismantle a cybercrime marketplace that sold phishing tools, accounts, and scam infrastructure
  • Platforms CoGUI and Iron Man enabled large-scale phishing campaigns targeting organizations worldwide
  • The operation drove over a billion phishing messages before domains and thousands of accounts were seized

Late last year, Microsoft set out to investigate what seemed to be yet another phishing campaign.

However, what it uncovered under the surface was a lot bigger - it was a sprawling Chinese-language cybercrime marketplace where countless threat actors bought, traded, and sold digital accounts, web hosting services, as well as different tools needed to create spoofed websites and fake identities.

The company has now revealed how it led the move to dismantle the marketplace, together with private cybersecurity companies including Proofpoint, and law enforcement agencies from Japan.

YAM Store, CoGUI, and Iron Man

The investigation began after Japan’s National Police Agency (NPA) tipped Microsoft...

Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE

Read more