#3
BleepingComputer
general
October 14, 2026 at 13:12 UTC
Global takedown hits network behind 1 billion phishing messages
By Bill Toulas
AI Summary
Microsoft, Health-ISAC, Japan's National Police Agency, and partners including Cloudflare, Oracle, and Proofpoint dismantled three Chinese-language phishing kit platforms — CoGUI (aka NX/FA), Haozi (aka Phoenix), and Iron Man System — operating under the YAM Store marketplace. Since January 2026, these kits fueled over 1 billion malicious messages targeting more than 75,000 organizations across 150 countries. A U.S. federal court order enabled seizure and redirection of the underlying domains.
Relevance score: 92.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →