Microsoft and Health-ISAC are disrupting YAM Store, CoGUI and Iron Man, services that enabled more than one billion malicious messages targeting organizations worldwide.

マイクロソフトは警察庁などと連携し、詐欺メッセージを支える中国語圏のサイバー犯罪市場を調査。Health-ISACとともにYAM Store、CoGUI、Iron Manのドメインを差し押さえました。

Microsoft uncovered a criminal marketplace called YAM Store, tracked as Storm-3119, that supplied phishing tools and accounts used in scams worldwide. The operation involved three phishing kits, including one called CoGUI (also known as NX), which were sold through this underground marketplace. Attackers used these resources to target organizations in healthcare, financial services, wholesale distribution, and IT sectors across Japan, the United States, Australia, and India. Microsoft worked with Resecurity to identify the marketplace and the phishing kits being sold. The network was responsible for more than a billion scam messages.

Microsoft has used a US court order to hit a marketplace and two kits behind a billion phishing messages. What the services were, why it is a civil seizure rather than an arrest, and what to check in your own Microsoft 365 tenant.

Microsoftは日本の警察庁と連携し、中国語圏のサイバー犯罪「アプリストア」に対処YAM Store、CoGUI、Iron Manは150カ国以上の人々を標的にMicrosoftは世界各国の法執行機関と協力し、企業や個人を狙う違法な活動の摘発を進めるMicrosoftは、日本の警察庁と共同で実施した作戦により

📰 Source : Risky Business (Tom Uren), publié le 22 octobre 2026. Cet article de newsletter hebdomadaire couvre plusieurs incidents et tendances majeures en cybersécurité.

Une opération vise CoGUI et deux kits de phishing, avec saisies de domaines et action judiciaire.

A US court order let Microsoft and Health-ISAC seize domains behind YAM Store, CoGUI and Iron Man, services that sold scammers accounts and fake bank sites.

Une opération vise CoGUI et deux kits de phishing, avec saisies de domaines et action judiciaire.

Microsoft and Health-ISAC have seized and redirected domains behind three Chinese-language cybercrime services, YAM Store, CoGUI and Iron Man, Microsoft said on Wednesday. Since January 2026, the...

Microsoft and Health-ISAC seize domains linked to YAM Store, CoGUI and Iron Man, services that enabled over 1…

Microsoft and international partners have disrupted infrastructure supporting CoGUI. This phishing kit Proofpoint says generates more than 100 million malicious emails monthly.

Microsoft, Health-ISAC, and international partners have disrupted a major Chinese-language Phishing-as-a-Service (PhaaS) marketplace targeting healthcare.

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.

A court-backed operation targeted YAM Store, CoGUI and Iron Man, phishing services Microsoft linked to campaigns against more than 75,000 organizations.

Microsoftと国際的なパートナーが、フィッシングキット「CoGUI」を支えるインフラを妨害しました。Proofpointによると、このキットは月間1億通を超える悪意あるメールを生み出しています。 今回の共同対応は、中国語圏の詐欺エコシステムを標的にしたものです。このエコシステムには、関連するフィッシングキットや

Microsoft and Health-ISAC seize domains linked to YAM Store, CoGUI and Iron Man, services that enabled over 1 billion malicious messages since January 2026.