MICROSOFT DISRUPTS 3 PHISHING KITS LINKED TO OVER 1 BILLION SCAM MESSAGES

Summary from the TLDR InfoSec newsletter

Microsoft and partners disrupted CoGUI, Haozi, and Iron Man System, three phishing kits sold on the YAM Store marketplace. Since January, they have supported more than one billion phishing emails and SMS messages sent to more than 75,000 organizations. The kits used hijacked Microsoft and Google cloud environments, roughly 17,000 domains, fake CAPTCHAs, IP filtering, and WebSocket-based capture of credentials and financial data.