Source: thehackernews.com
Microsoft, Health-ISAC, Japan Cybercrime Control Center (JC3), and private sector partners including Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs jointly disrupted three phishing kits: CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man System. Since January 2026, the threat actors behind these kits have been responsible for over 1 billion scam messages. The operation represents a significant cross-sector and international collaboration to take down large-scale phishing infrastructure. These phishing kits were used to conduct widespread scam campaigns targeting a broad range of victims. The disruption highlights the growing trend of coordinated public-private partnerships in combating cybercrime.
