Microsoft and Health-ISAC seized domains behind YAM Store, CoGUI and Iron Man, phishing services tied to more than 1 billion messages since January. Microsoft's Steven Masada wrote that the three are only part of a larger criminal network.
Perspective Coverage
14 publishers
- Builder
- Builder 11%
- Operator
- Operator 68%
- Investor
- Investor 21%
Reality
- Evidence70
- Adoption70
- Hype gap+15
- Incentives55
- Confidence74
Microsoft and international partners dismantled the Yam Store phishing marketplace, whose kits enabled more than 1 billion malicious messages. Microsoft says buyers could deploy the pre-made kits very quickly, so a polished lure says little about the sender's skill.
Perspective Coverage
4 publishers
- Builder
- Builder 16%
- Operator
- Operator 56%
- Investor
- Investor 28%
Reality
- Evidence55
- Adoption70
- Hype gap+15
- Incentives60
- Confidence65
Japan detained a Russian national alleged to be a core Qilin ransomware member in Osaka in May and has extradited him to Germany. Qilin went on listing victims while he was held, more than 450 since June by BleepingComputer's count.
Perspective Coverage
5 publishers
- Builder
- Builder 7%
- Operator
- Operator 59%
- Investor
- Investor 34%
Reality
- Evidence74
- Adoption
- Not scored
- Hype gap+18
- Incentives
- Not scored
- Confidence72
Japan's FSA asks banks and crypto exchanges to drop photo-ID checks before the 2027 deadline
Japan's FSA asked banks and crypto exchanges to swap photographed-ID checks for IC-chip reading now, ahead of an April 1, 2027 deadline. The request follows a Times Car breach of about 1.6 million license images, Cryptopolitan reported, and leaves each firm to decide whether to pay for the switch this year or wait for the law.
Reality
- Evidence42
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence40
Four governments have put a bureau name on the fake-recruiter campaign against software developers, and their alert says the same crews also work as North Korea's remote IT hires, from the same IP addresses.
Perspective Coverage
8 publishers
- Builder
- Builder 34%
- Operator
- Operator 52%
- Investor
- Investor 14%
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+5
- Incentives40
- Confidence72
Seven agencies price North Korea's fake-recruiter funnel at $1,530 a wallet
Japan, the US, Australia and Germany put eight months of North Korea's developer-targeting campaign at $10.71 million taken from more than 7,000 wallets. CertiK counted $2.06 billion of North Korea-linked crypto theft in 2025 alone.
Reality
- Evidence72
- Adoption70
- Hype gap+8
- Incentives45
- Confidence62
Four governments pin $10.7m of crypto theft on fake recruiter coding tests
A joint advisory ties about $10.71 million of stolen cryptocurrency to more than 30,000 infected devices in over 100 countries. That works out near $357 a machine, and the payroll half of the same operation ran for years.
Reality
- Evidence62
- Adoption55
- Hype gap+12
- Incentives55
- Confidence57
buildOne report1 publisher Four governments trace 30,000 infected devices to fake interview coding tasks
Seven agencies across four countries tied fake recruiters and take-home coding tasks to eight months of infections and drained cryptocurrency wallets.
Reality
- Evidence62
- Adoption70
- Hype gap+15
- Incentives32
- Confidence52