Microsoft Disrupts YAM Store Criminal Marketplace Selling Phishing Kits Globally

Microsoft uncovered a criminal marketplace called YAM Store, tracked as Storm-3119, that supplied phishing tools and accounts used in scams worldwide. The operation involved three phishing kits, including one called CoGUI (also known as NX), which were sold through this underground marketplace. Attackers used these resources to target organizations in healthcare, financial services, wholesale distribution, and IT sectors across Japan, the United States, Australia, and India. Microsoft worked with Resecurity to identify the marketplace and the phishing kits being sold. The network was responsible for more than a billion scam messages.