Post

Just announced: CoGUI has been disrupted. Proofpoint supported @microsoft.com in the major takedown of Chinese-speaking cybercrime threat actors and CoGUI, the infrastructure supporting their activities. More details: www.proofpoint.com/us/blog/thre...

We were proud to provide threat data from our visibility, including malicious domains and information related to CoGUI, CoAceV and CoFish_Ws campaigns, and provided a declaration for the suit.

The CoGUI phishing kit has made Japan one of the most targeted countries in our data based on campaign volume. Threat actors use it to impersonate well-known Japanese and international companies, stealing usernames, passwords, and payment data.