Microsoft and Japan Disrupt Major Phishing Infrastructure Behind Billion-Scam Message Campaign
Microsoft, in collaboration with Japan's National Police Agency, has disrupted a significant cybercrime operation responsible for distributing over one billion fraudulent messages globally.
The investigation centered on YAM Store, an online marketplace that provided scammers with tools to conduct phishing campaigns. Two associated phishing kits—named CoGUI and Iron Man—were identified as the primary instruments enabling the mass distribution of malicious messages.
According to findings, the operation has targeted more than 75,000 organizations worldwide since January 2026. The scam messages included common tactics such as fake parking ticket notifications and counterfeit package delivery alerts, schemes designed to trick recipients into revealing personal information or credentials.
The takedown represents a coordinated effort between the technology sector and law enforcement to combat the infrastructure supporting large-scale fraud operations. Phishing marketplaces like YAM Store lower the barrier for less technically sophisticated criminals to launch sophisticated attacks, amplifying the overall threat landscape.