Japan orgs targeted by CoGUI phishing kit impersonating Amazon, Rakuten

Proofpoint researchers have published new analyses this week on the phishing kit called 'CoGUI', whose activity has increased considerably in recent weeks in Japan. The cybercriminals behind these campaigns usurp the identity of large companies including Amazon, Apple, PayPay or Rakuten to actively target Japanese organizations. According to Proofpoint's observations, these campaigns mainly targeted financial organizations in April 2025, using t…

Hackers Flood Japan with Phishing Emails Using ‘CoGUI’ Kit

A powerful new phishing campaign is flooding Japanese email inboxes. According to reports by cybersecurity firm Proofpoint, a cybercrime tool known as CoGUI was used to send over 580 million phishing emails between January and April 2025. This wave of scams is designed to steal usernames, passwords, and payment information, mostly by impersonating major companies like Amazon, Rakuten, Apple, and PayPal. “The highest volume threat in current Proo…

Japan orgs targeted by CoGUI phishing kit impersonating Amazon, Rakuten

People and organizations across Japan are being inundated with phishing messages from cybercriminals who are using CoGUI, a sophisticated toolkit that lets them avoid detection.