Phishing tool sales site suspended in collaboration with Microsoft - National Police Agency

The National Police Agency announced on the 14th that it had forcibly suspended the domain of a site that sold accounts used for ``phishing scams'' that steal credit information through fake emails pretending to be from companies, as well as tools to create fake sites. Measures taken in collaboration with Microsoft (MS) and other companies. The agency's Cyber ​​Special Investigation Department uncovered the actual state of the criminal infrastructure.

The domains that were suspended include tools used in phishing scams such as CoGUI and IronMan, as well as 34 domains that sold illegally obtained cloud service accounts to fraudsters. MS filed a lawsuit in the United States based on information from the Japanese side, and the suspension was granted on the 8th. MS also suspended approximately 2,500 related accounts.

According to the agency, using tools such as Cogui makes it easy to create fake websites that look just like the real thing. The fraudster sent a fake email to the victim and asked them to enter their financial institution's password information.

Ironman has templates for the websites of over 2,300 companies, including major Japanese companies and hospitals, and half of the approximately 120,000 fake websites that the Cyber ​​Special Investigation Department identified in 2025 were created using these two tools.

The purchaser of the tool appears to have been sending fake emails to addresses leaked in a cyber attack, and MS analyzed that more than 100 million emails were sent to Japanese customers since May of this year.