Microsoft's Legal Action Shuts Down Cybercrime Network Storm-1152

Microsoft has obtained a court order to seize the infrastructure of Storm-1152, a cybercrime network that sold approximately 750 million fraudulent Microsoft accounts and tools through bogus websites and social media pages. The group facilitated various cybercrimes, including phishing, identity theft, fraud, and DDoS attacks, and earned millions of dollars in illicit revenue. Multiple threat actors, including Octo Tempest, used Storm-1152's accounts for ransomware, data theft, and extortion schemes. Microsoft identified three individuals based in Vietnam who were involved in developing and maintaining the infrastructure.