Microsoft and Health-ISAC win U.S. court order to seize domains tied to YAM Store

Microsoft and Health-ISAC win U.S. court order to seize domains tied to YAM Store

N
News Editor
2026-10-17 01:23:45
Microsoft and the cybersecurity group Health-ISAC have obtained a U.S. court order to seize and redirect domains that supported three services — YAM Store, CoGUI, and Iron Man — according to CryptoSlate. The services were described as vendors of stolen accounts and phishing tools used by fraudsters. Since January this year, they have helped distribute more than 1 billion phishing messages targeting over 75,000 organizations across more than 150 countries, generating tens of millions of dollars for their operators. Microsoft said it has disabled more than 20,000 accounts linked to YAM Store and continues to block over 100,000 spoofed and fraudulent domains. Its investigation found that the services accepted payments in USDT on Tron and in ETH, while Cloudflare said buyers could also pay in USDC. Blockchain analytics firm TRM Labs helped investigators identify and freeze related assets, though the amount frozen was not disclosed.

Microsoft and cybersecurity organization Health-ISAC have obtained a U.S. court order to seize and redirect domains supporting three services — YAM Store, CoGUI, and Iron Man — according to CryptoSlate.

The report said the three services sold stolen accounts and phishing tools to fraudsters. Since January this year, they have helped send more than 1 billion phishing messages targeting over 75,000 organizations in more than 150 countries, generating tens of millions of dollars in revenue for their operators.

Steps taken by Microsoft and investigators

Microsoft has disabled more than 20,000 accounts linked to YAM Store and continues to block more than 100,000 spoofed and fraudulent domains.

Microsoft’s investigation found that the services accepted payments in USDT on the Tron network and in ETH. Cloudflare said buyers could also use USDC.

Blockchain analytics company TRM Labs assisted investigators in locating and freezing related assets, but the amount frozen was not disclosed.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
900

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.