LOWPhishing
Global

Microsoft Takes Down Massive Chinese Phishing Marketplace

·Source: Bank Info Security

Updated:

Executive Summary

Chinese-Language Phishing Services Sent 1 Billion Malicious Messages in 2026 A network of major Chinese-language phishing sites used by cybercriminals to impersonate tens of thousands of global corporations had their

Analysis

Chinese-Language Phishing Services Sent 1 Billion Malicious Messages in 2026 A network of major Chinese-language phishing sites used by cybercriminals to impersonate tens of thousands of global corporations had their infrastructure seized following a U.S. court order sought by Microsoft and healthcare organization Health-ISAC.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/microsoft-takes-down-massive-chinese-phishing-marketplace-image_small-7-a-33107.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Oct 14, 2026.

Related Threats

MEDIUMPhishing

Hacker gets 8 years for stealing $3.3 million from taxpayers

A Nigerian national was sentenced to eight years in prison for his involvement in a series of spearphishing attacks targeting US tax preparation businesses since 2019. [...]

BleepingComputer
CRITICALPhishing

HMS Networks PEAK-System PCAN Windows drivers

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-293-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could crash the Windows kernel.</strong></p> <p>The following versions of HMS Networks PEAK-System PCAN Windows drivers are affected:</p> <ul> <li>PEAK-System Device Driver Setup <=5.1.

CVE-2026-109576CVE-2026-101103
CISA Advisories
CRITICALPhishing

Moxa AIG-302 ThingsPro Edge

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-293-03.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information.</strong></p> <p>The following versions of Moxa AIG-302 ThingsPro Edge are affected:</p> <ul> <li>Moxa AIG-302 Thing

CVE-2026-109812CVE-2026-109813
CISA Advisories