[Microsoft Collaborates with Multiple Parties to Dismantle Phishing Network Involving Over 75,000 Organizations]
Microsoft and Health-ISAC obtained a U.S. court order to seize domains supporting YAM Store, CoGUI, and Iron Man services. Since January this year, the network has sent over 1 billion phishing messages, targeting more than 75,000 organizations across 150+ countries, generating tens of millions of dollars in profit for the operators. Microsoft has disabled over 20,000 accounts related to YAM Store and blocked more than 100,000 fraudulent domains. The network accepted payments in USDT (Tron network), ETH, and USDC, with TRM Labs assisting investigators in locating and freezing related assets.