According to CoinMeta, Microsoft and health-isac have obtained a court order from a U.S. court to seize domain names that support yam, store, cogui, and iron man services. This network has sent over 1 billion phishing messages since January of this year, targeting more than 75,000 institutions in over 150 countries, with the operators profiting tens of millions of dollars. Microsoft has disabled more than 20,000 yam store related accounts and blocked over 100,000 fraudulent domain names. The network accepted payments from USDT (the TRON network), ETH, and USDC; TRM Labs assisted investigators in locating and freezing related assets.