Microsoft and Japanese police disrupt global cybercrime app stores
Microsoft and the Japanese National Police Agency disrupted three Chinese-language cybercrime marketplaces: YAM Store, CoGUI, and Iron Man. The operation targeted over 75,000 organizations across 150 countries, intercepting more than one billion malicious messages. Partners included Cloudflare and Oracle. This collaboration highlights the growing need for cross-border tech enforcement to combat sophisticated impersonation scams affecting global enterprises and consumers.
Key points
- Microsoft, the US technology giant, collaborated with the Japanese National Police Agency to dismantle three cybercrime app stores: YAM Store, CoGUI, and Iron Man.
- The disrupted ecosystem targeted 75,000 organizations across more than 150 countries, sending over one billion malicious communications to promote scams.
- Specifically, 750 million of these malicious messages were directed at Microsoft’s own customer base, highlighting the scale of the threat to enterprise users.
- Partners in the operation included Cloudflare, Oracle, Proofpoint, Resecurity, and TRM Labs, who helped identify and neutralize the pre-fabricated fake websites and impersonation templates.
- The marketplaces provided cybercriminals with ready-made tools to impersonate legitimate services, generating millions of dollars in revenue for the operators.
- This joint effort demonstrates an expanding model of public-private partnership where tech firms share intelligence with law enforcement to combat transnational digital fraud.
Microsoft has announced a significant victory in its ongoing battle against digital fraud, partnering with the Japanese National Police Agency to disrupt a network of cybercrime marketplaces. The operation focused on three distinct platforms—YAM Store, CoGUI, and Iron Man—that functioned as app stores for Chinese-language cybercriminals. These platforms served as a gateway for scammers, providing them with pre-fabricated fake websites and message templates designed to impersonate legitimate services and trick both businesses and individuals.
The scale of the operation was substantial, with investigators uncovering that the ecosystem had targeted 75,000 organizations across more than 150 countries. In total, over one billion malicious communications were sent to promote these scams, generating millions of dollars for the criminal operators. Notably, 750 million of these messages were specifically aimed at Microsoft’s own customers, indicating a direct impact on the company’s enterprise and consumer base. The disruption required a coordinated effort involving not just Microsoft and Japanese authorities, but also major tech and security firms such as Cloudflare, Oracle, Proofpoint, Resecurity, and TRM Labs.
The collaboration highlights a shifting landscape in cybersecurity, where technology companies are increasingly working alongside international law enforcement to tackle transnational threats. By identifying and shutting down these specific marketplaces, the partners aim to reduce the volume of impersonation scams that rely on easily deployable templates. This joint approach suggests a future where global tech giants play a more active role in policing the digital supply chain, ensuring that the tools used by cybercriminals are neutralized before they can reach a wider audience.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.
