Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages

Microsoft, Health-ISAC, and the Japan Cybercrime Control Center, alongside partners like Cloudflare and Oracle, disrupted three phishing kits: CoGUI, Haozi, and Iron Man System. This collaborative effort dismantled a cybercrime network and marketplace responsible for sending over one billion scam messages globally since January 2026. The operation, involving Japan's National Police Agency, targeted threat actors distributing fraudulent texts regarding fake package deliveries and nonexistent parking tickets to reduce the volume of phishing attacks worldwide.