Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
Microsoft and Japan's National Police Agency have dismantled a cybercrime network responsible for sending over a billion scam messages worldwide, according to Microsoft. The joint effort resulted in the disabling of more than 20,000 accounts linked to the YAM Store marketplace, along with the blocking of over 100,000 fraudulent websites.
Through their investigation, Microsoft and the National Police Agency discovered that the YAM Store, CoGUI, and Iron Man platforms had enabled more than one billion malicious messages, primarily targeting Microsoft customers and various sectors such as healthcare, financial institutions, and businesses in over 150 countries. Scammers utilized stolen or counterfeit Microsoft and Google accounts, available on YAM Store, and employed phishing kits to distribute their fraudulent messages.
Additionally, the YAM Store hijacked expired web domains and established websites for non-existent organizations to deceive potential victims. To counteract these threats, Microsoft collaborated with the Health-ISAC to seize and redirect the domains powering these platforms.
Written by urgent.news from The Verge's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
