In 2025, Japan warned Microsoft of a ‘message scam’, software giant traced it to China months later, blocking three online stores that hit 75,000 companies across the globe

In a major coordinated offensive against transnational cybercrime, Microsoft and the Health Information Sharing and Analysis Center have seized and redirected the online infrastructure powering three Chinese-language cybercrime stores known as YAM Store, CoGUI and Iron Man. Acting under an order granted by the US District Court for the Southern District of Florida, investigators dismantled an illicit ecosystem that has fueled over one billion malicious messages across more than 150 countries since January. The sweeping attacks targeted consumers, banks, healthcare networks, and over 75,000 organizations globally, generating tens of millions of dollars for their operators while directing more than 750 million fraudulent messages at Microsoft customers alone.