Microsoft dismantles phishing marketplace behind 1 billion scams
Microsoft, with partners including Health‑ISAC, shut down the YAM Store, CoGUI and Iron Man cyber‑crime markets that sent more than 1 billion phishing messages worldwide.
15 Oct 2026 0 reads Compiled with AI
#Microsoft #YAM Store #CoGUI #Iron Man #Health-ISAC #Japan's National Police Agency
The takedown was authorized by a federal judge in the Southern District of Florida on Oct. 7, 2026, and followed a year‑long investigation that began after a tip from Japan’s National Police Agency.
The marketplaces sold ready‑made phishing kits that allowed criminals to quickly deploy fake websites and emails.
The investigation was launched after Japan’s National Police Agency reported a wave of scams targeting Japanese businesses, and later involved security firms Proofpoint, Resecurity, Cloudflare, Oracle and blockchain intelligence company TRM Labs. Microsoft used AI tools to link seemingly unrelated accounts, domains and infrastructure, revealing the broader criminal ecosystem.
The takedown highlights the need for better cyber hygiene. Microsoft recommends practices such as verifying sender authenticity, using passkeys and multi‑factor authentication, hardening cloud identities, and applying the principles of least privilege and zero trust to protect administrative roles.