Microsoft has seized several fraudulent websites and halted their operations after identifying that they were part of a criminal enterprise operating out of Vietnam. The organization, known as Storm-1152, created fraudulent Microsoft accounts to sell to cybercriminals, generating millions in illicit earnings. Microsoft’s actions highlight the growing role private-sector companies are playing in cybersecurity enforcement. Experts believe the seizure will disrupt the criminals’ operations, at least temporarily, and will serve as a deterrent for other cybercriminal groups.

Black Basta-like Microsoft Teams phishing leads to novel backdoor
A phishing campaign exploiting Microsoft Teams has been discovered deploying a unique PowerShell backdoor. Cybersecurity firm ReliaQuest identified an attack technique previously unseen in the