Microsoft, working with Japan’s National Police Agency and healthcare cybersecurity group Health-ISAC, disrupts three major phishing platforms used by Chinese-speaking cybercriminals. The effort relies on a U.S. court order that allows Microsoft to seize and redirect domains used as infrastructure for the YAM Store, CoGUI, and Iron Man phishing ecosystems.
Across outlets, reporting emphasizes the scale and speed of the activity. The partners say that over a period of less than 10 months, cybercriminals deployed customized phishing kits to send more than 1 billion malicious messages targeting at least 75,000 organizations worldwide. Coverage also links the action to the broader aim of taking down the domain and delivery mechanisms behind phishing operations rather than targeting individual victims directly.
While the outlets share the same core facts—domain seizure/redirects, named phishing platforms, and the reported volume of messages—they differ in emphasis. CyberScoop highlights the ecosystem and number of targeted organizations, while SecurityWeek focuses on the court-backed takedown. The Record underscores the multinational coordination and domain control aspects.
