微软、日本当局、Health-ISAC 以及网络安全合作伙伴已破坏一个被追踪为 Storm-2990 的大型中文网络犯罪网络。该威胁行为体运营 YAM Store、CoGUI 和 Iron Man 等服务，分发钓鱼套件，2026 年向全球 7.5 万多家组织发送了超过 10 亿条欺诈信息。
Microsoft and Global Partners Dismantle Chinese Phishing Kit Network Storm-2990 Microsoft, Japanese authorities, Health-ISAC, and cybersecurity partners have disrupted a major Chinese-language cybercrime network tracked as Storm-2990. Operating services such as YAM Store, CoGUI, and Iron Man, the threat actors distributed phishing kits responsible for sending over 1 billion fraudulent messages to more than 75,000 organizations worldwide in 2026.
根据联邦法院命令，微软和 Health-ISAC 扣押并重定向了核心域名基础设施，禁用了 2 万多个关联账户，并封锁了 10 万多个用于金融诈骗和凭证窃取的伪造域名，涉及医疗、金融、物流和 IT 等行业。
Operating under a federal court order, Microsoft and Health-ISAC seized and redirected core domain infrastructure, disabled over 20,000 connected accounts, and blocked more than 100,000 spoofed domains used for financial fraud and credential theft across the healthcare, financial, logistics, and IT sectors.