Court order enables seizure of domains supporting global phishing network

Microsoft and Health-ISAC seized and redirected domains supporting the YAM Store marketplace and CoGUI and Iron Man phishing platforms under an order from the US District Court for the Southern District of Florida. BleepingComputer reported that the disrupted ecosystem facilitated more than a billion malicious messages targeting over 75,000 organizations across 150 countries. Microsoft also deactivated over 20,000 accounts associated with YAM Store and blocked 100,000 domains used for impersonation and fraud. The marketplace sold compromised or fraudulently obtained cloud environments, accounts, licenses and storage, which attackers used to support phishing. Additional infrastructure is being removed as the investigation continues with Japanese authorities and industry partners.