Microsoft disrupts Chinese-language phishing kits behind 1bn scam messages

Microsoft and Health-ISAC have seized and redirected domains behind three Chinese-language cybercrime services, YAM Store, CoGUI and Iron Man, Microsoft said on Wednesday. Since January 2026, the three services enabled more than 1bn malicious messages targeting over 75,000 organisations worldwide. More than 750 million of those messages targeted Microsoft customers, the company said.