Microsoft and Health-ISAC win U.S. court order to seize domains tied to YAM Store

Microsoft and the cybersecurity group Health-ISAC have obtained a U.S. court order to seize and redirect domains that supported three services — YAM Store, CoGUI, and Iron Man — according to CryptoSlate. The services were described as vendors of stolen accounts and phishing tools used by fraudsters. Since January this year, they have helped distribute more than 1 billion phishing messages targeting over 75,000 organizations across more than 150 countries, generating tens of millions of dollars for their operators. Microsoft said it has disabled more than 20,000 accounts linked to YAM Store and continues to block over 100,000 spoofed and fraudulent domains. Its investigation found that the services accepted payments in USDT on Tron and in ETH, while Cloudflare said buyers could also pay in USDC. Blockchain analytics firm TRM Labs helped investigators identify and freeze related assets, though the amount frozen was not disclosed.