A Coordinated Research and Partnership Takedown
Resecurity
PR Consultant - Media Relations and Research Launches
Timeframe: October 2026 - Current engagement
Location: Cybersecurity
Summary
PressContact ran media for Resecurity around threat research connected to Microsoft and Health-ISAC’s court-ordered disruption of YAM Store, CoGUI and Iron Man.
Selected results
- 25
- stories secured
First 48 hours - 21
- named Resecurity
Of the 25 stories - 14
- credited its research
By name
The Situation
On October 14, 2026, Microsoft and Health-ISAC announced a court-ordered disruption of YAM Store, CoGUI and Iron Man, three Chinese-language services that supplied phishing kits, lure templates and accounts to fraud operators. Since January 2026, the services had supported more than one billion scam emails and texts aimed at over 75,000 organizations worldwide. The investigation began with information from Japan’s National Police Agency, and it drew on work from JC3 and several security companies.
Resecurity was one of those research partners. Its analysis of Iron Man documented 2,360 lure templates impersonating banks, police and government agencies in 130 countries, which helped show how far the kit’s reach extended.
The communications goal was to support the larger story while making Resecurity’s contribution clear. Reporters needed the full picture of the operation and the partners behind it. They also needed specific, accurate details on what Resecurity’s research showed, so the findings were attributed correctly.
The Work
- Coordinated launch-day timing and media with Microsoft around the October 14 takedown.
- Built a separate target list of about 72 reporters outside Microsoft’s own media list.
- Took Resecurity research reports to security and business media.
- Followed up where coverage had not credited Resecurity, offering data and an interview with the CEO.
Key Results & Achievements
- Secured 25 stories in the first 48 hours.
- 21 stories named Resecurity.
- 14 stories credited Resecurity’s research by name.
PressContact Outreach Placements
CSO Online
named Resecurity.
The CyberWire
Cybersecurity News
Chinese Phishing Network Linked to 1 Billion Messages Targeting 75,000 Organizations
Computing
International operation dismantles network behind a billion phishing messages
NewsBytes
Microsoft, Japan dismantle scam network behind billions of phishing messages
eSecurity Planet
Microsoft Disrupts Phishing Network Behind 1 Billion Messages
Tech Insider
Microsoft, Japan Take Down Network Behind 1B Scams
GBHackers
Iron Man Phishing-as-a-Service Kit Impersonates Banks, Couriers and Government Agencies Worldwide
Help Net Security
Microsoft disrupts phishing network behind more than a billion scam messages
CyberPress
Iron Man Phishing Kit Uses 2,360 Fake Pages to Target Victims Across 130 Countries
SecurityOnline
Microsoft and Proofpoint Disrupt CoGUI Phishing Kit, YAM Store, and Iron Man
Gigazine
Microsoft and the National Police Agency are dismantling the electronic market
Neoteo
Microsoft and JC3 report disruption of YAM Store-linked services
Atlabyte
Microsoft and Japan police disrupt network behind 1 billion phishing messages
it-boltwise
Microsoft stoppt drei Phishing-Kits
WindowsForum
Microsoft Disrupts YAM Store Network Behind 1 Billion Phishing Scams
SQ Magazine
Microsoft Takes Down Chinese-Language Phishing Services
Daily Security Review
Microsoft Seizes Domains of Chinese Phishing Kits Behind 1B Messages
FRNT
Microsoft and Japanese Authorities Dismantle Global Phishing Network
iTechPost
Microsoft Leads Major Takedown With Japan Against Massive Phishing Scam Network
World Today News
Microsoft and Japan Police neutralize billion-message scam ring
The Hack Academy
Microsoft and Health-ISAC seized phishing domains under a US court order
Analytics Insight
Microsoft Takes Down Global Scam Network Behind 1 Billion Messages