Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
Microsoft disrupted three Chinese phishing platforms that enabled more than 750 million impersonation messages.
Microsoft said a U.S. court order let it seize and redirect domains supporting YAM Store, CoGUI, and Iron Man, phishing platforms used by Chinese cybercriminals. Since January the three services collectively enabled more than 750 million malicious messages aimed at Microsoft customers, impersonating over 75,000 organizations in more than 150 countries to steal credentials and financial data. Iron Man offered more than 2,300 lure templates, while YAM Store sold access to compromised or fraudulently obtained Microsoft and Google environments, including education and nonprofit accounts. Microsoft disabled more than 20,000 related accounts and is blocking over 100,000 impersonation domains, working with Japan's National Police Agency, Health-ISAC, and Resecurity.