Microsoft, in collaboration with cybersecurity group Health-ISAC, disrupted a cybercrime network that used Tether's USDT and Ethereum to fund phishing operations. The company secured a U.S. court order on October 14 to seize and redirect domains supporting YAM Store, CoGUI, and Iron Man, which sold accounts and phishing tools. These services helped criminals send over one billion phishing messages this year, targeting more than 75,000 organizations across 150 countries and generating tens of millions of dollars for their operators. Microsoft has disabled over 20,000 accounts linked to YAM Store and continues to block more than 100,000 impersonation and fraud domains. Blockchain analytics firm TRM Labs aided in locating and freezing assets linked to the group, though the value remains undisclosed.