Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages

Microsoft, Health-ISAC, Japan's JC3, and private partners including Cloudflare and Oracle disrupted three phishing kits—CoGUI, Haozi, and Iron Man System—linked to over 1 billion scam messages since January 2026. The takedown targets infrastructure used by threat actors to launch large-scale phishing campaigns, reducing their ability to send malicious emails.