<![CDATA[Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages]]>Microsoft, working alongside Health-ISAC, the Japan Cybercrime Control Center (JC3), and a coalition of private sector partners including Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, has announced the disruption of three phishing kits. The kits are tracked as CoGUI (also known as NX or FA), Haozi (also known as Phoenix), and Iron Man System.

According to the announcement, the threat actors behind these kits have been responsible for a massive volume of scam messages since January 2026 — collectively linked to over 1 billion fraudulent messages.

Key details from the disclosure:

  • Three phishing kits disrupted: CoGUI (aka NX / FA), Haozi (aka Phoenix), and Iron Man System
  • Operation involved Microsoft, Health-ISAC, JC3, and private partners Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs
  • The actors behind these kits have driven scam message campaigns since January 2026
  • The kits are tied to more than 1 billion scam messages

The disruption highlights the ongoing value of cross-industry collaboration between technology vendors, threat intelligence firms, and regional cybercrime authorities in dismantling phishing infrastructure at scale.

Source: The Hacker News

Has your organization seen any activity tied to these phishing kits, and what detection or mitigation steps are you taking?

]]>https://xploitlk.com/topic/727/microsoft-disrupts-3-phishing-kits-linked-to-over-1-billion-scam-messagesRSS for NodeTue, 27 Oct 2026 07:51:03 GMTSun, 18 Oct 2026 06:30:18 GMT60