[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGJWyDpPiqm1Ei8jikCiQJjdqmoN373yVEs3CERLJ2d0":3},{"article":4,"iocs":38,"watch_terms":39,"solutions":40,"lesson":131},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"1010073a-fd14-4975-9ffd-3cbdee03237b","Yam Store: The Phishing Network Behind a Billion Messages","yam-store-the-phishing-network-behind-a-billion-messages-203b61","A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.","Yam Store, a sophisticated cybercrime marketplace, has been identified as the provider of cloud infrastructure and phishing kits that facilitated the distribution of over one billion phishing messages globally. This operation highlights the organized nature of phishing-as-a-service, where specialized platforms enable widespread malicious activity.","Cybercrime marketplace 'Yam Store' supplied infrastructure and kits for over 1 billion phishing messages.","https:\u002F\u002Fwww.darkreading.com\u002Fcyberattacks-data-breaches\u002Fyam-store-phishing-network-behind-billion-messages","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt9dea48f154a2fb24\u002F6acfd2ceaf9e572367afea5c\u002Ffishing_hooks-MicroStockHub-GettyImages-2193660035.jpg?width=720&quality=80&disable=upscale","2026-10-14T20:57:16+00:00","2026-10-14T22:00:08.42183+00:00",7,[17],{"name":18,"type":19},"Yam Store","threat_actor","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":20,"icon":22,"name":23,"slug":24},null,"Malware","malware",[26,31,33],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":32},{"id":20,"icon":22,"name":23,"slug":24},{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[],{"controls":41,"vendors":124},[42,70,99],{"slug":37,"name":43,"problem":44,"products":45},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[46,54,62],{"vendor_slug":47,"vendor_name":48,"vendor_logo":49,"product_slug":50,"product_name":51,"url":52,"description":53},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"slug":71,"name":72,"problem":73,"products":74},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[75,83,91],{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-email","Darktrace \u002F EMAIL","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Femail","Email security that flags messages deviating from normal communication patterns.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"slug":100,"name":101,"problem":102,"products":103},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[104,110,117],{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":105,"product_name":106,"url":108,"description":109},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":100,"product_name":114,"url":115,"description":116},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":118,"product_name":121,"url":122,"description":123},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",[125],{"slug":126,"name":127,"logo_path":128,"roles":129},"google","Google","\u002Fvendor-logos\u002Fgoogle.png",[130],"reported_by",{"slug":132,"title":133,"body":134,"framework_refs":135,"framework_notes":146},"phishing-as-a-service-how-yam-store-weaponized-cloud-infrastructure-at-scale","Phishing-as-a-Service: How Yam Store Weaponized Cloud Infrastructure at Scale","Yam Store operated as a sophisticated cybercrime marketplace offering ready-made phishing kits and cloud infrastructure, enabling low-skill threat actors to launch massive, professional-grade phishing campaigns responsible for over one billion malicious messages. This 'Phishing-as-a-Service' (PhaaS) model lowers the barrier to entry for cybercriminals by commoditizing attack tooling, meaning organizations can no longer assume attackers need advanced technical skills. The industrialization of phishing means that volume, variety, and velocity of attacks will continue to grow, overwhelming traditional defenses. Without strong user awareness training, robust email filtering, and proactive threat intelligence, organizations remain highly vulnerable to credential theft and downstream breaches.",[136,137,138,139,140,141,142,143,144,145],"CIS Control 9 – Email and Web Browser Protections","CIS Control 14 – Security Awareness and Skills Training","CIS Control 17 – Incident Response Management","NIST SP 800-61 – Computer Security Incident Handling Guide","NIST SP 800-177 – Trustworthy Email (DMARC\u002FDKIM\u002FSPF)","NIST AT-2 – Literacy Training and Awareness","NIST SI-8 – Spam Protection","MITRE ATT&CK T1566 – Phishing","GDPR Article 32 – Security of Processing","ITIL Security Management – Threat and Vulnerability Management",{}]