CoGUI

Reported Context (2)

three phishing kits sold through the YAM Store that make up this Chinese-language cybercriminal network: CoGUI (also known as NX or FA), Haozi (also known as Phoenix), and Iron Man System. Microsoft Details Phishing-Kit Ecosystem Behind Billion-Message Campaigns
activity to YAM Store (Storm-3119), an underground infrastructure marketplace, then linked it to the CoGUI, Haozi, and Iron Man System phishing kits, collectively tracked as Storm-2990. Global Takedown Disrupts Phishing Network Behind More Than 1 Billion Messages

Threat Actors (2)

MITRE ATT&CK (13)

Vendors (7)

Products (9)

Tools (8)

Industries (4)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.