# Microsoft and Health-ISAC move to dismantle YAM Store, CoGUI and Iron Man cybercrime services

Canonical page: https://technooptimist.io/stories/microsoft-and-health-isac-move-to-dismantle-yam-store-cogui-and-iron-d5e03929
Date: 14 Oct 2026
About: [Microsoft](https://technooptimist.io/companies/microsoft.md)
Original source: https://blogs.microsoft.com/on-the-issues/2026/10/14/disrupting-the-service-economy-behind-transnational-cybercrime-operations/

Microsoft's Digital Crimes Unit, working with Health-ISAC and other partners, moved against three components of a Chinese-language cybercrime marketplace: YAM Store, CoGUI and Iron Man. Under a U.S. court order, the company seized and redirected domains that supported the services and says it disabled more than 20,000 YAM Store accounts. The investigation started with victims in Japan, and Japan's National Police Agency supplied intelligence.

## Key facts

- Court order from the U.S. District Court for the Southern District of Florida; more than 100,000 impersonation and fraud domains were blocked.
- YAM Store sold fraudulent Microsoft and Google accounts, CoGUI supplied ready-made fake websites, and Iron Man offered more than 2,300 impersonation templates.
- Microsoft cites more than one billion malicious messages and more than 75,000 targeted organizations since January 2026, in over 150 countries.
- The figures are approximate or lower bounds; the post stresses that appearing in a template does not mean an organization was compromised.
- Partners include Japan's National Police Agency, JC3, Health-ISAC, Cloudflare, Oracle, Proofpoint and TRM Labs, plus U.S. Secret Service and international police.

---

The Techno Optimist tracks every frontier of technology, program by program: https://technooptimist.io/ (a Markdown version of any page: add .md to its URL; site map for agents: https://technooptimist.io/llms.txt).
Data API (JSON, realtime stream): https://technooptimist.io/developers. People read 5 pages free, then Reader $10/month; these Markdown pages are open to agents.