Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages

Microsoft, in collaboration with several organizations, has disrupted three phishing kits known as CoGUI, Haozi, and Iron Man System. These kits were linked to threat actors responsible for a large volume of scam messages. The disruption was a joint effort between Microsoft, Health-ISAC, the Japan Cybercrime Control Center, and various private sector companies. The phishing kits in question were used by threat actors from January 2026 onwards. The threat actors were responsible for over 1 billion scam messages. The collaboration led to the successful disruption of these phishing kits.