Microsoft announced on October 15, 2026, that it had disrupted a major phishing-as-a-service network responsible for sending more than one billion fraudulent emails and SMS messages. The operation targeted YAM Store, a criminal marketplace that sold phishing kits and compromised accounts used to attack organizations in healthcare, finance and IT across several countries, including the United States, Japan and Australia.
The takedown followed a nearly year-long investigation involving international authorities and cybersecurity firms. Microsoft’s Digital Crimes Unit obtained a court order to seize and redirect domains supporting the criminal infrastructure, disabling tens of thousands of accounts linked to the service.
The operation highlights the industrial scale of modern phishing and Microsoft’s role in combating global cybercrime.