Microsoft Disrupts Three Phishing Kits Linked to Over 1 Billion Scam Messages

Microsoft, Health-ISAC, and a coalition of private sector companies disrupted three phishing kits responsible for over 1 billion scam messages since January 2026. The operation targeted credential theft and financial fraud through malicious kits linked to threat actors.

Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man System.

"Since January 2026, the threat actors behind these kits have been responsible for

Read original article