Executive News Wire

Fact-first intelligence synthesized across 12+ news agencies. Zero sensationalism.

Live Wire

CHRONOLOGICAL WIRE DISPATCHES

The NCRBuzz Standard

Every story is structurally partitioned: The News (pure facts), Key Takeaways, Historical Context, and Wire Attribution. Fact-first synthesis without sensationalism.

Aggregated from 12+ Wires Fact-Cross-Referenced

❤️ Support Bias-Free News

Help keep NCRBuzz 100% free of sensationalism, sponsored propaganda, and clickbait. Support our journalists via Google Reader Revenue.

Technology & AI The Verge • Oct 14, 2026

Microsoft and Japan National Police Agency Dismantle YAM Store Cybercrime Network Behind One Billion Scam Messages

💡 Key Takeaways

•Microsoft and Japan National Police Agency dismantled the YAM Store cybercrime marketplace.
•The illicit network utilized CoGUI and Iron Man phishing kits to send over one billion scam messages.
•More than 75,000 enterprise organizations globally were targeted by SMS phishing campaigns.

NEW DELHI [NCRBuzz Wire] — TOKYO [NCRBuzz Wire] — **Microsoft has collaborated with Japan's National Police Agency to dismantle a massive cybercrime marketplace known as YAM Store, which served as the operational backbone for over one billion phishing messages worldwide.**

### Architectural Disruption of Phishing Infrastructure

**The joint enforcement action neutralized not only the central YAM Store marketplace domain but also neutralized two sophisticated phishing kits designated as CoGUI and Iron Man.** **Technical telemetry indicates that the takedown severely disrupts a cybercrime supply chain responsible for launching more than 750 million targeted messages aimed at high-value enterprise targets.** Security researchers confirmed that the infrastructure facilitated automated SMS phishing campaigns disguised as mundane administrative alerts, including fake delivery notifications and non-existent parking penalty warnings.

### Global Enterprise Impact Metrics

**Operational since January 2026, the dismantled malicious ecosystem successfully breached or targeted more than 75,000 unique corporate, governmental, and institutional organizations across multiple international jurisdictions.** Enterprise threat intelligence analysts utilized advanced heuristics to map the command-and-control servers linked to the CoGUI and Iron Man kits. The following metrics outline the scope of the targeted cyberattacks:

| Metric / Aspect | Details |

|---|---|

| Total Malicious Messages | Over 1 Billion |

| Targeted Enterprise Organizations | 75,000+ |

| Primary Phishing Kits Neutralized | CoGUI and Iron Man |

| Enforcement Partners | Microsoft Threat Intelligence & Japan National Police Agency |

### Cybersecurity Mitigation and Future Defense

**Enterprise security teams have been advised to update threat detection rules to block remnant indicators of compromise (IoCs) tied to the YAM Store infrastructure.** Cybersecurity experts emphasize that while this disruption removes a major vector for SMS phishing, threat actors constantly adapt their methodologies, necessitating continuous patch management and zero-trust verification frameworks across global cloud environments.

NCRBuzz Wire Desk ✓ Verified Wire

AI-synthesized and fact-audited across multiple independent news agencies.

Editorial Standards • About NCRBuzz

🏛️ Background Context

The operation represents an ongoing international collaboration between major technology conglomerates and global law enforcement agencies to dismantle scalable Crime-as-a-Service (CaaS) platforms that leverage SMS and messaging APIs for enterprise fraud.

💡 Citizen & Commuter Quick Explainer (FAQ)

Q1: What triggered the law enforcement action against YAM Store?

An extensive international investigation by Microsoft Threat Intelligence and Japan's National Police Agency tracked over one billion malicious phishing messages back to YAM Store, CoGUI, and Iron Man.

Q2: What specific phishing kits and tools were dismantled in this operation?

The joint operation successfully dismantled the YAM Store marketplace along with two primary phishing kits designated as CoGUI and Iron Man.

Q3: How many organizations and messages were impacted by this cybercrime network?

The illicit infrastructure enabled more than one billion malicious messages targeting over 75,000 global enterprise and institutional organizations since January 2026.

Verified Wires: The Verge Original Wire Dispatch ↗

Link copied to clipboard

Executive News Wire

60-Sec Speed Wire

Article Headline

All Caught Up!