Yam Store: The Phishing Network Behind a Billion Messages
Cybercrime marketplace 'Yam Store' supplied infrastructure and kits for over 1 billion phishing messages.
Summary
Yam Store, a sophisticated cybercrime marketplace, has been identified as the provider of cloud infrastructure and phishing kits that facilitated the distribution of over one billion phishing messages globally. This operation highlights the organized nature of phishing-as-a-service, where specialized platforms enable widespread malicious activity.
The lesson from this incident
Full lessonYam Store operated as a sophisticated cybercrime marketplace offering ready-made phishing kits and cloud infrastructure, enabling low-skill threat actors to launch massive, professional-grade phishing campaigns responsible for over one billion malicious messages. This 'Phishing-as-a-Service' (PhaaS) model lowers the barrier to entry for cybercriminals by commoditizing attack tooling, meaning organizations can no longer assume attackers need advanced technical skills. The industrialization of phishing means that volume, variety, and velocity of attacks will continue to grow, overwhelming traditional defenses. Without strong user awareness training, robust email filtering, and proactive threat intelligence, organizations remain highly vulnerable to credential theft and downstream breaches.
What helps against this
How we list vendors
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.