Microsoft and Japan's National Police Agency have dismantled YAM Store, a marketplace enabling scammers to send over one billion phishing messages worldwide since January 2026. The operation targeted two phishing kits — CoGUI and Iron Man — which collectively targeted over 75,000 organizations, including more than 750 million messages aimed at individual victims.
Background
Phishing kits like CoGUI and Iron Man are commercialized tools sold on underground marketplaces that allow even non-technical criminals to send large-scale fraudulent messages. YAM Store operated as a hub for these criminal-as-a-service offerings, making it a significant target for international law enforcement.
- Source
- The Verge
- Published
- Oct 15, 2026 at 04:03 AM
- Score
- 8.0 / 10