Threat+Constellation
Live— UTC
← Incidents
INCIDENT 943PhishingLOW / UNDER REVIEWSourced

The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime

Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastructure for large-scale phishing. In collaboration with law enforcement agencies and other partners worldwide, Microsoft’s Digital Crimes Unit (DCU) facilitated a disruption of the ecosystem. The post The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime appeared first on Microsoft Security Blog .

Last evidence update
14 OCT 2026 · 13:00 UTC
Source count
1
Status
reported
China
Observation history

How this record has evolved as evidence accumulated.

15 OCT · 05:00 UTC
Initial report
Evidence