
Microsoft and Japanese Authorities Dismantle Global Phishing Network
Microsoft collaborated with Japan's National Police Agency to shut down a major cybercrime marketplace responsible for over one billion phishing messages. The operation targeted the 'YAM Store' platform and two specific phishing software kits used to deceive users globally.
Microsoft has announced the successful disruption of a significant cybercrime infrastructure in coordination with Japan's National Police Agency. The joint operation focused on dismantling a platform known as the 'YAM Store,' which served as a marketplace for scammers. According to Microsoft, this network facilitated the distribution of over one billion malicious messages since January 2026, impacting more than 75,000 organizations worldwide.
The investigation identified two primary phishing kits, branded as 'CoGUI' and 'Iron Man,' as the core tools utilized by the network. These kits were designed to automate the creation and delivery of fraudulent text messages, commonly mimicking legitimate notifications such as fake parking tickets or package delivery alerts. By targeting the infrastructure behind these kits, authorities aim to reduce the volume of phishing attempts reaching consumers.
While the report confirms the shutdown of these specific tools, it does not detail the current status of the individuals behind the operation or whether any arrests have been made. The collaboration highlights a growing trend of private technology companies partnering with international law enforcement to combat automated cyber threats. Microsoft indicated that this action is part of a broader effort to mitigate the impact of large-scale phishing campaigns that rely on standardized software kits to scale their operations globally.
📡 Media Analysis
How each outlet framed the story — angles, word choices, and what they chose to push or ignore.
Focused on the practical consumer benefit of the takedown while identifying the specific technical tools involved.
"hopefully you'll start seeing fewer of them"
✓ Only outlet to report: Identified the specific names of the phishing kits, CoGUI and Iron Man.
🔍 What Nobody's Reporting
- ·Lack of information regarding the legal status or arrests of the operators behind the YAM Store.
- ·No mention of the specific geographic distribution of the 75,000 affected organizations.
📰 Sources
0 A-rated source(s) among 1 total. Lowest trust: The Verge (B)
