# Microsoft and Japanese Authorities Disrupt Phishing Kits

Microsoft and Japanese authorities, supported by Health-ISAC and cybersecurity firms, disrupted infrastructure used by the YAM Store, CoGUI, and Iron Man phishing-kit services. The operation highlights continuing demand across government and industry for phishing defense, identity and token security, threat intelligence, and cross-sector incident response. The report identifies no procurement solicitation, contract award, or contract value, so it signals relevant capability needs rather than a specific bid opportunity.

- Procurement teams can use the operation as context when assessing whether existing security tools and services address phishing kits, credential theft, and identity-token risks.
- Contractors serving public-sector and healthcare customers may find demand for threat intelligence and coordinated incident-response capabilities, areas directly implicated by the operation.
- No solicitation, award, value, or deadline is reported; the signal does not establish a current procurement opportunity.

**Jurisdictions:** international
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** October 14, 2026

### Government Entities
- Japanese authorities
- U.S. federal court

### Vendors
- Microsoft ()
- Resecurity ()
- Cloudflare ()
- Oracle ()
- Proofpoint ()

### Sources
- [Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem | CyberScoop](https://cyberscoop.com/microsoft-disrupts-chinese-language-phishing-kit-ecosystem) - CyberScoop