Microsoft · Japan · Ethereum · Google · CryptoSlate
Microsoft exposes how USDT-funded phishing network targeted 75,000 organizations
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
◌ Single Source
Microsoft disrupted cryptocurrency-accepting cybercrime suppliers linked to more than one billion phishing messages worldwide this year.
Key facts
- Microsoft said it had disabled more than 20,000 accounts linked to YAM Store and was continuing to block more than 100,000 impersonation and fraud domains
- The company and cybersecurity group Health-ISAC secured a US court order to seize and redirect domains supporting YAM Store, CoGUI and Iron Man, three services that sold accounts and phishing tools to fraudsters, according to an Oct
- The crackdown involved Japan's police and Cybercrime Control Center, along with Oracle, Proofpoint, Resecurity, and US law-enforcement partners
- The investigation began after Japan's National Police Agency alerted Microsoft to scams targeting consumers and businesses late last year
Summary
01 Microsoft disrupted a crypto-linked phishing network tied to over 1 billion malicious messages, disabling more than 20,000 accounts. 02 The cybercrime suppliers accepted USDT and ETH to sell stolen credentials and phishing tools used to target over 75,000 organizations. 03 Blockchain investigators helped identify assets for freezing, but the financial damage remains unclear as criminals seek replacement infrastructure. The company and cybersecurity group Health-ISAC secured a US court order to seize and redirect domains supporting YAM Store, CoGUI and Iron Man, three services that sold accounts and phishing tools to fraudsters, according to an Oct. 14 statement.