Microsoft moves to dismantle a phishing-kit marketplace

Microsoft and Health-ISAC said on Oct. 14, 2026 that they are dismantling YAM Store, CoGUI and Iron Man, services that sell phishing tools and fraudulent accounts. Under an order from the U.S. District Court for the Southern District of Florida, they seized and redirected supporting domains. Microsoft said the services have enabled more than one billion malicious messages to over 75,000 organizations since January 2026, and that it has disabled more than 20,000 YAM Store accounts and is blocking more than 100,000 impersonation domains.