- Microsoft said that, together with Japan's National Police Agency, it investigated and blocked features of the marketplace YAM Store, the text sending tool CoGUI, and Iron Man, which scammers used to send fake texts in bulk.
- According to a Microsoft report, since January 2026 the three platforms enabled more than 1 billion malicious messages, and more than 750 million of them targeted Microsoft customers. The damage scale and profit estimates are the company's claims.
- According to the source article, scammers bought stolen or forged Microsoft and Google accounts on YAM Store, and either seized expired institutional domains or created sites for institutions that do not exist to obtain Microsoft accounts, which they then resold.
- Iron Man provided more than 2,300 templates that impersonated institutions such as banks and police stations. Microsoft suspended more than 20,000 accounts linked to YAM Store and blocked more than 100,000 impersonation and fraud domains, and together with the nonprofit health sector organization Health-ISAC, it recovered the domains of the three platforms and redirected them.
O: A security officer at an agency who often gets texts impersonating parcel tracking or parking violation notices may find this useful when adding this case's impersonation type to staff training materials.
X: The performance figures and damage estimates are claims from the company based on a Microsoft announcement, and the source does not include independent verification, so check the original report before quoting the numbers.