Microsoft and Japan took down a cybercrime network behind over a billion scam messages
Microsoft says it disabled over 20,000 accounts connected to a marketplace for scammers.
Microsoft says it disabled over 20,000 accounts connected to a marketplace for scammers.
by
Stevie Bonifield
Oct 14, 2026, 8:03 PM UTC
Photo by Amelia Holowaty Krales / The Verge
Stevie Bonifield
is a news writer covering all things consumer tech. Stevie started out at Laptop Mag writing news and reviews on hardware, gaming, and AI.
We’ve all gotten a scam text about a nonexistent parking ticket or a fake package delivery, but hopefully you’ll start seeing fewer of them. Microsoft says it helpeddismantle a marketplace for scammerssending phishing messages like those around the world. Through an investigation with Japan’s National Police Agency, it tracked scam activity back to a marketplace called YAM Store and a pair of phishing kits, CoGUI and Iron Man:
Since January 2026, YAM Store, CoGUI and Iron Man have collectively enabled more than one billion malicious messages targeting over 75,000 organizations worldwide, including more than 750 million messages geared toward Microsoft customers alone. These messages have been used to target consumers, healthcare organizations, financial institutions, and other businesses in more than 150 countries, generating tens of millions of dollars for their operators.
According to Microsoft’sreport, scammers could buy stolen or fraudulent Microsoft and Google accounts on YAM Store and use the phishing kits to send scam messages. Microsoft says YAM Store also hijacked real organizations’ expired web domains and created websites for nonexistent organizations, which it used to get Microsoft accounts it could resell.
The Iron Man platform was also offering over 2,300 templates scammers could use to impersonate organizations like banks and police departments. Microsoft says it disabled over 20,000 accounts connected to YAM Store and blocked over 100,000 web domains being used for impersonation and fraud. With health sector cybersecurity non-profit Health-ISAC, Microsoft also seized and redirected web domains that were powering all three platforms.
Follow topics and authorsfrom this story to see more like this in your personalized homepage feed and to receive email updates.
- Stevie Bonifield
Most Popular
Most Popular
- The Tesla Roadster could have stayed vaporware
- I tried out Apple’s HomeView smart display
- Honey, Xbox shrunk its controller
- Everything Apple launched at its ‘Welcome Home’ event
- The Ocarina of Time remake feels remarkably modern — and surprisingly terrifying
This is the title for the native ad
More inTech
The AI race is back onAs a TV enthusiast, I was hoping for more from the Apple TV 4KSprout Pi adds Bluetooth, streaming, and USB-C to your aging iPodAnbernic’s next dual-screen handheld could replace your aging Nintendo 3DSOpenAI claims an ex-employee took its product plans and presented them to AppleRepairing the iPhone Duo’s folding screen costs as much as a new iPhoneThe AI race is back onRobert Hart
Two hours ago
As a TV enthusiast, I was hoping for more from the Apple TV 4KJohn Higgins
Two hours ago
Sprout Pi adds Bluetooth, streaming, and USB-C to your aging iPodTerrence O'Brien
5:19 PM UTC
Anbernic’s next dual-screen handheld could replace your aging Nintendo 3DSAndrew Liszewski
5:13 PM UTC
OpenAI claims an ex-employee took its product plans and presented them to AppleEmma Roth
4:43 PM UTC
Repairing the iPhone Duo’s folding screen costs as much as a new iPhoneJay Peters
4:21 PM UTC
Advertiser Content FromThis is the title for the native ad
Top Stories
11:00 AM UTC
The Tesla Roadster could have stayed vaporware5:00 PM UTC
My AI doppelganger tells me what to eat1:00 PM UTC
The Ocarina of Time remake feels remarkably modern — and surprisingly terrifying4:16 PM UTC
Honey, Xbox shrunk its controller1:00 PM UTC
The Alexa Tablet 12 Pro is almost the Android tablet we needed
