Microsoft Dismantles Chinese Phishing Empire That Flooded the World With Over a Billion Scam Messages

Microsoft Dismantles Chinese Phishing Empire That Flooded the World With Over a Billion Scam Messages

Microsoft and global partners seized domains and disabled accounts tied to YAM Store, CoGUI and Iron Man phishing kits responsible for over one billion malicious messages since January 2026. The operation reveals a professionalized cybercrime supply chain that lowered barriers for attackers worldwide. New reporting from October 15 confirms the kits targeted 75,000 organizations across 150 countries.

Microsoft disrupts three phishing kits tied to 1B+ scam messages

Microsoft said it disrupted three phishing kits linked to more than 1 billion scam messages, targeting credentials and payment data at scale. The action focused on infrastructure and services described in Microsoft’s operation against industrialized...

Microsoft exposes how USDT-funded phishing network targeted 75,000 organizations

Domain seizures and account shutdowns hit YAM Store and phishing-kit services, while reported asset freezes remain unquantified. Read the full story on CryptoSlateUnderstand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox

Microsoft Seizes YAM Store and Phishing Kit Domains Linked to 1B Malicious Messages

Microsoft and Health-ISAC seize domains linked to YAM Store, CoGUI and Iron Man, services that enabled over 1 billion malicious messages since January 2026. Microsoft and the Health Information Sharing and Analysis Center (Health-ISAC) have seized and redirected internet domains supporting a Chinese-language cybercrime marketplace that supplied cybercriminals with fraudulent accounts, phishing kits and infrastructure.

Chinese Phishing Network Linked to 1 Billion Messages Targeting 75,000 Organizations

A Chinese-run phishing network has been linked to one billion phishing emails targeting 75,000 organizations, according to a report published on October 14, 2026. The operation centers on Iron Man System, a paid phishing platform that lets criminals deploy fake websites and collect sensitive information without building their own tools. The report lists those headline […]