By Ana Maria Constantin
Publication Date: 2026-10-17 19:34:00
Microsoft and Health-ISAC have seized and redirected domains behind three Chinese-language cybercrime services, YAM Store, CoGUI and Iron Man, Microsoft said on Wednesday. Since January 2026, the three services enabled more than 1bn malicious messages targeting over 75,000 organisations worldwide.
More than 750 million of those messages targeted Microsoft customers, the company said. They targeted consumers, healthcare groups, banks and other businesses in more than 150 countries. They generated tens of millions of dollars for the services’ operators.
“What appears to be a simple scam message is often the visible end of a much larger transnational cybercriminal operation.” Steven Masada, general manager of Microsoft’s Digital Crimes Unit
A trail that started in Japan
The investigation began in late 2025, after Japan’s National Police Agency alerted Microsoft to scam campaigns targeting people in Japan. It expanded to involve the Japan Cybercrime…
