Post

@threatintel.microsoft.com

Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators, developers, and an illicit marketplace selling tools and infrastructure for large-scale phishing, enabling cybercriminal operations worldwide. msft.it/63320asXrk

msft.itThe hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime | Microsoft Security BlogMicrosoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastructure for large-scale phishing. In collaboration with law enforcement agencies and other partners worldwide, Microsoft’s Digital Crimes Unit (DCU) facilitated a disruption of the ecosystem.

14/10/26, 1:13 pm4 reposts7 likes

Global Threat Signal

@globalthreatsignal.bsky.social

Phishing-as-a-service ecosystems like this lower the skill barrier dramatically, so disrupting developers and shared infrastructure can have outsized downstream impact.

Microsoft Threat Intelligence

@threatintel.microsoft.com

In collaboration with law enforcement agencies and other partners worldwide, Microsoft’s Digital Crimes Unit (DCU) facilitated a disruption of the ecosystem’s primary developers and infrastructure. msft.it/63326asXnn

Microsoft Threat Intelligence

@threatintel.microsoft.com

Read our blog for a technical analysis of this Chinese-language phishing kit ecosystem, the shared infrastructure, provisioning methods, and downstream activity by threat actors using these tools, as well as protection and detection guidance for users and organizations.