Cogui - GoKawiil

Microsoft, Japan police dismantle YAM Store phishing marketplace

Microsoft and Japan's National Police Agency disrupted a cybercrime operation centered on a marketplace called YAM Store and two phishing kits, CoGUI and Iron Man. Since January 2026, the network had reportedly sent over one billion malicious messages to more than 75,000 organizations in 150+ countries, including 750 million aimed at Microsoft customers, generating tens of millions of dollars for operators.

theverge.com · 2026-10-14

Microsoft and Japan's NPA dismantle Chinese phishing network behind 1B messages

Microsoft and Japan's National Police Agency disrupted a cybercrime ecosystem that sent over a billion phishing messages to more than 75,000 organizations in 150 countries, including over 750 million targeting Microsoft customers this year. The investigation traced the activity to a marketplace called YAM Store, linked to phishing kits CoGUI, Haozi and Iron Man System, which sold compromised Microsoft and Google accounts and hijacked domains to impersonate real organizations.

bleepingcomputer.com · 2026-10-14