As phishing-as-a-service goes industrial, Microsoft takes down a marketplace behind 1 billion messages

Microsoft dismantled Yam Store, a criminal marketplace responsible for distributing 1 billion malicious messages. This coordinated underground network specialized in commercial phishing-as-a-service (PhaaS), providing cybercriminals with pre-made kits to steal credentials and data. The operation resulted from a year-long investigation involving international authorities, cybersecurity firms, and AI tools, initiated by a tip from Japanese authorities. This action disrupts the industrialization of phishing attacks by removing the infrastructure used to deploy these malicious kits.