MEDIUMPhishing
Global

Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages

·Source: The Hacker News

Updated:

Executive Summary

Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man System. "Since January 2026, the threat actors behind these kits have been responsible for

Analysis

Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man System. "Since January 2026, the threat actors behind these kits have been responsible for
Source Attribution

Originally published by The Hacker News on Oct 14, 2026.

Related Threats

CRITICALPhishing

Machine speed attacks require machine speed detection and response

Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining why faster detection and automated containment are critical. [...]

BleepingComputer
MEDIUMPhishing

EU Regulators to Investigate Booking.com Over Scam Risks

The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks

Infosecurity Magazine
CRITICALPhishing

InterSystems Corporation InterSystems IRIS for Health

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-295-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device.</strong></p> <p>The following versions of InterSystems Corporation InterSystems IRIS for Health

CVE-2026-111594
CISA Advisories