Sam's News — email-security — 2026-10-14¶
Security¶
7 The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime¶
Microsoft Threat Intelligence and the Digital Crimes Unit exposed a Chinese-language cybercriminal ecosystem centered on phishing kit distribution and sale. The ecosystem includes phishing kit operators, developers, and an illicit marketplace selling tools and compromised cloud credentials targeting organizations in healthcare, financial services, IT, and wholesale distribution.
- Illicit marketplace tracked as Storm-3119 ('YAM Store') sells phishing kits and infrastructure
- Threat actors targeted healthcare, financial services, IT, wholesale distribution in Japan, US, Australia, India
- Phishing kits include Storm-2990 ('The Iron Man System') and related tools
- Microsoft Digital Crimes Unit disrupted primary developers and infrastructure in collaboration with law enforcement
Sources: Microsoft Security Blog AI Web Searched, Microsoft Web Search
6.5 'You have a meeting': the calendar phishing scam growing exponentially¶
Calendar-based phishing attacks using meeting invitations are rapidly increasing as a social engineering tactic.
Sources: The Guardian Web Search
6 Email threat landscape Q2 2026: emerging trends and security insights¶
Q2 2026 email security report documents evolving threat patterns and attack methodologies.
Sources: Microsoft Web Search
5.5 Sublime Security launches tailored phishing simulation and training platform¶
Sublime Security released a new phishing simulation and employee training tool customized for organizational security needs.
Sources: PR Newswire Web Search
5.5 ABA launches anti-scam campaign targeting AI-powered deepfakes¶
The American Bankers Association relaunches its anti-fraud initiative with new focus on AI-generated deepfake threats.
Sources: CU Today RSS
Cybercrime Infrastructure¶
6.5 Microsoft analysis maps global phishing infrastructure ecosystem powering cybercrime¶
Microsoft researchers expose the hidden network infrastructure that enables phishing campaigns at global scale.
Sources: Microsoft RSS
Email Security¶
6 Attackers Abuse Microsoft's Legitimate Websites to Bypass Email Security Filters¶
Hackers are exploiting Microsoft's own trusted domains and infrastructure to send phishing emails that circumvent traditional email security filters. This technique allows attackers to hide behind legitimate Microsoft websites while launching targeted phishing campaigns against organizations.
- Phishing emails are now originating from legitimate platforms and trusted service domains to evade detection
- Attackers abuse Microsoft infrastructure to bypass email filters and appear trustworthy to recipients
- 1 in 10 phishing emails now comes from a platform users recognize and trust