Microsoft and Google take down $66 million RedVDS cybercrime marketplace

Microsoft and Google, working through the Global Signal Exchange, shut down RedVDS, a marketplace selling virtual machines used for phishing and fraud. Between September and December 2025, 130,000 organizations were targeted and 191,000 Microsoft email accounts were compromised.

• RedVDS sold scam-ready VMs from $24 a month
• 130,000 organizations and 191,000 Microsoft accounts hit
• Domains seized in the US and UK, servers in Germany
• Google and Microsoft will keep sharing data via GSE