Microsoft disrupts three phishing platforms used by Chinese cybercriminals

Microsoft obtained a U.S. court order to seize and redirect domains tied to YAM Store, CoGUI and Iron Man, phishing platforms used by Chinese cybercriminals. Since January the three enabled over 750 million malicious messages impersonating 75,000 organizations across 150+ countries.

• More than 20,000 accounts and 100,000 impersonation domains disabled
• Iron Man offered 2,300+ pre-built phishing lure pages via subscription
• YAM Store sold access to compromised Microsoft and Google accounts
• Campaigns generated tens of millions of dollars for operators