Post

We were proud to provide threat data from our visibility, including malicious domains and information related to CoGUI, CoAceV and CoFish_Ws campaigns, and provided a declaration for the suit.

The disruption will impact the Chinese #phishing and #financialfraud ecosystem. Today, we block over 100 million email messages per month using CoGUI. Microsoft has found that this kit type has enabled more than 1 billion malicious messages worldwide since January 2026.

The CoGUI phishing kit has made Japan one of the most targeted countries in our data based on campaign volume. Threat actors use it to impersonate well-known Japanese and international companies, stealing usernames, passwords, and payment data.