{"id":3029,"date":"2026-01-20T13:49:34","date_gmt":"2026-01-20T21:49:34","guid":{"rendered":"https:\/\/celacampaig.wpenginepowered.com\/?page_id=3029"},"modified":"2026-08-10T06:46:35","modified_gmt":"2026-08-10T13:46:35","slug":"cybersecurity","status":"publish","type":"page","link":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/","title":{"rendered":"Cybersecurity"},"content":{"rendered":"<main data-bi-ct=\"group\" class=\"wp-block-group alignfull microsoft-breakpoint-id-aj19niumf has-global-padding is-layout-constrained wp-container-core-group-is-layout-ee2332cf wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"aj19niumf\"><section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-white-color has-clear-blue-fade-gradient-background has-text-color has-background has-link-color microsoft-breakpoint-id-wmdfkgjku wp-elements-eb057a5648225cf78a4f1da7da49f74f has-global-padding is-layout-constrained wp-container-core-group-is-layout-93f47bd8 wp-block-group-is-layout-constrained block-visibility-hide-small-screen\" style=\"margin-top:0;margin-bottom:0;padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-right:0;padding-bottom:var(--wp--preset--spacing--2-xl-fluid);padding-left:0\" data-microsoft-breakpoint-id=\"wmdfkgjku\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide has-brown-black-color has-text-color has-link-color microsoft-breakpoint-id-4o39ltrqm layout-ruled-split-intro-alt wp-elements-8bae004ce36531aa429999b1540c67db is-layout-grid wp-container-core-group-is-layout-5a23bf8e wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"4o39ltrqm\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-moeusyoov wp-container-content-e1688eaf is-vertical is-content-justification-stretch is-nowrap is-layout-flex wp-container-core-group-is-layout-340759e1 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"moeusyoov\"><h2 class=\"wp-block-post-title has-body-4-xl-fluid-font-size wp-container-content-9cfa9a5a\">Cybersecurity<\/h2>\n\n\n<div style=\"--social-share-foreground-color: #dcede8;--social-share-background-color: #291817;--social-share-icon-size: clamp(2rem, 4vw + 1rem, 2.125rem)\" class=\"social-share social-share--size-medium wp-block-microsoft-social-share-social-share\" data-wp-interactive=\"microsoft-social-share\">\n\n\t\n\t<ul class=\"social-share__list\">\n\t\t\t\t\t<li class=\"social-share__item\">\n\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.linkedin.com\/sharing\/share-offsite\/?url=https%3A%2F%2Fresearch.codeghost.online%2Fen-us%2Fcorporate-responsibility%2F%2Ftopics%2Fcybersecurity%2F\" aria-label=\"Share on LinkedIn\" target=\"_blank\" rel=\"noreferrer noopener\" class=\"social-share__link social-share--linkedin\" data-bi-socchn=\"Linkedin\" data-bi-cn=\"Share Linkedin\" data-bi-ecn=\"Share Linkedin\" data-bi-ct=\"socialshare\">\n\t\t\t\t\t\t<span aria-hidden=\"true\" class=\"microsoft-social-share-svg\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"0 0 24 25\"><path fill=\"var(--social-share-background-color)\" d=\"M10.998.412c-8.922.654-13.956 10.862-9.123 18.441 4.752 7.45 15.734 7.369 20.336-.18C27.345 10.256 20.754-.294 10.998.422zM8.918 16.68h-2.24V9.311h2.24zm.08-9.22c-.753 1.902-3.617.14-2.16-1.43.935-1.007 2.713.04 2.16 1.43m8.46 9.22h-2.24v-4.53s-.18-.493-.221-.553c-.402-.685-1.608-.614-2.05.03-.15.211-.321.775-.321 1.017v4.036h-2.24V9.311h2.17v.986c.763-1.017 1.778-1.288 3.014-1.087 1.004.161 1.889 1.248 1.889 2.255v5.234-.02Z\"><\/path><\/svg><\/span>\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t<li class=\"social-share__item\">\n\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fresearch.codeghost.online%2Fen-us%2Fcorporate-responsibility%2F%2Ftopics%2Fcybersecurity%2F&amp;text=Cybersecurity\" aria-label=\"Share on X\" target=\"_blank\" rel=\"noreferrer noopener\" class=\"social-share__link social-share--x\" data-bi-socchn=\"X\" data-bi-cn=\"Share X\" data-bi-ecn=\"Share X\" data-bi-ct=\"socialshare\">\n\t\t\t\t\t\t<span aria-hidden=\"true\" class=\"microsoft-social-share-svg\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"0 0 24 24\"><circle cx=\"12.366\" cy=\"11.635\" r=\"11.635\" fill=\"var(--social-share-background-color)\"><\/circle><path fill=\"var(--social-share-foreground-color)\" d=\"m13.474 10.745 4.331-4.927H16.78l-3.763 4.277-3.003-4.278H6.548l4.543 6.47-4.543 5.165h1.026l3.972-4.518 3.172 4.519h3.465l-4.71-6.708Zm-5.53-4.17h1.577l2.956 4.136.46.645 3.842 5.376h-1.577z\"><\/path><\/svg><\/span>\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t<li class=\"social-share__item\">\n\t\t\t\t\t\t\t\t\t<div class=\"social-share__copy-wrapper\" data-wp-context='\n\t\t\t\t\t\t{\"copyUrl\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\\\/topics\\\/cybersecurity\\\/\",\"showTooltip\":false,\"tooltipShift\":\"0px\"}\t\t\t\t\t\t'>\n\t\t\t\t\t\t<a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/\" aria-label=\"Copy share link\" class=\"social-share__link social-share--share-link copy-link\" data-wp-on--click=\"actions.copyToClipboard\" id=\"share-link-6a7deff8ec2cf\" data-bi-socchn=\"Share\" data-bi-cn=\"Share Share\" data-bi-ecn=\"Share Share\" data-bi-ct=\"socialshare\">\n\t\t\t\t\t\t\t<span aria-hidden=\"true\" class=\"microsoft-social-share-svg\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"32\" height=\"32\" fill=\"none\"><path stroke=\"var(--social-share-background-color)\" stroke-miterlimit=\"10\" stroke-width=\"2\" d=\"m18.274 24.009-4.003 4.002c-3.032 3.033-7.963 3.033-10.996 0s-3.033-7.964 0-10.997l4.002-4.002m3.981 6.995 9.016-8.995m-7.258-3.735 4.002-4.002c3.033-3.033 7.964-3.033 10.997 0s3.033 7.964 0 10.996l-4.003 4.003\"><\/path><\/svg><\/span>\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<span class=\"social-share__copy-notice\" data-wp-class--is-visible=\"state.isTooltipVisible\" data-wp-style----tooltip-shift=\"context.tooltipShift\" data-wp-init=\"callbacks.initTooltip\">\n\t\t\t\t\t\t\tLink copied to clipboard!\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/li>\n\t\t\t<\/ul>\n<\/div>\n<\/div>\n\n\n<p class=\"has-body-xl-fluid-font-size wp-container-content-e1688eaf wp-block-paragraph\">Explore Microsoft&rsquo;s approach to security through law, threat analysis, policy and diplomacy.<\/p>\n<\/div>\n<\/section>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignfull has-clear-blue-fade-gradient-background has-background microsoft-breakpoint-id-y9snw315y has-global-padding is-layout-constrained wp-block-group-is-layout-constrained block-visibility-hide-large-screen block-visibility-hide-medium-screen\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"y9snw315y\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-ug07rhgik is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-fb128502 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"ug07rhgik\"><h2 class=\"wp-block-post-title has-body-4-xl-fluid-font-size\">Cybersecurity<\/h2>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Explore Microsoft&rsquo;s approach to security through law, threat analysis, policy and diplomacy.<\/p>\n\n\n<div style=\"--social-share-foreground-color: #dcede8;--social-share-background-color: #291817;--social-share-icon-size: clamp(2rem, 4vw + 1rem, 2.125rem)\" class=\"social-share social-share--size-medium wp-block-microsoft-social-share-social-share\" data-wp-interactive=\"microsoft-social-share\">\n\n\t\n\t<ul class=\"social-share__list\">\n\t\t\t\t\t<li class=\"social-share__item\">\n\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.linkedin.com\/sharing\/share-offsite\/?url=https%3A%2F%2Fresearch.codeghost.online%2Fen-us%2Fcorporate-responsibility%2F%2Ftopics%2Fcybersecurity%2F\" aria-label=\"Share on LinkedIn\" target=\"_blank\" rel=\"noreferrer noopener\" class=\"social-share__link social-share--linkedin\" data-bi-socchn=\"Linkedin\" data-bi-cn=\"Share Linkedin\" data-bi-ecn=\"Share Linkedin\" data-bi-ct=\"socialshare\">\n\t\t\t\t\t\t<span aria-hidden=\"true\" class=\"microsoft-social-share-svg\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"0 0 24 25\"><path fill=\"var(--social-share-background-color)\" d=\"M10.998.412c-8.922.654-13.956 10.862-9.123 18.441 4.752 7.45 15.734 7.369 20.336-.18C27.345 10.256 20.754-.294 10.998.422zM8.918 16.68h-2.24V9.311h2.24zm.08-9.22c-.753 1.902-3.617.14-2.16-1.43.935-1.007 2.713.04 2.16 1.43m8.46 9.22h-2.24v-4.53s-.18-.493-.221-.553c-.402-.685-1.608-.614-2.05.03-.15.211-.321.775-.321 1.017v4.036h-2.24V9.311h2.17v.986c.763-1.017 1.778-1.288 3.014-1.087 1.004.161 1.889 1.248 1.889 2.255v5.234-.02Z\"><\/path><\/svg><\/span>\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t<li class=\"social-share__item\">\n\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fresearch.codeghost.online%2Fen-us%2Fcorporate-responsibility%2F%2Ftopics%2Fcybersecurity%2F&amp;text=Cybersecurity\" aria-label=\"Share on X\" target=\"_blank\" rel=\"noreferrer noopener\" class=\"social-share__link social-share--x\" data-bi-socchn=\"X\" data-bi-cn=\"Share X\" data-bi-ecn=\"Share X\" data-bi-ct=\"socialshare\">\n\t\t\t\t\t\t<span aria-hidden=\"true\" class=\"microsoft-social-share-svg\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"0 0 24 24\"><circle cx=\"12.366\" cy=\"11.635\" r=\"11.635\" fill=\"var(--social-share-background-color)\"><\/circle><path fill=\"var(--social-share-foreground-color)\" d=\"m13.474 10.745 4.331-4.927H16.78l-3.763 4.277-3.003-4.278H6.548l4.543 6.47-4.543 5.165h1.026l3.972-4.518 3.172 4.519h3.465l-4.71-6.708Zm-5.53-4.17h1.577l2.956 4.136.46.645 3.842 5.376h-1.577z\"><\/path><\/svg><\/span>\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t<li class=\"social-share__item\">\n\t\t\t\t\t\t\t\t\t<div class=\"social-share__copy-wrapper\" data-wp-context='\n\t\t\t\t\t\t{\"copyUrl\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\\\/topics\\\/cybersecurity\\\/\",\"showTooltip\":false,\"tooltipShift\":\"0px\"}\t\t\t\t\t\t'>\n\t\t\t\t\t\t<a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/\" aria-label=\"Copy share link\" class=\"social-share__link social-share--share-link copy-link\" data-wp-on--click=\"actions.copyToClipboard\" id=\"share-link-6a7deff8ef911\" data-bi-socchn=\"Share\" data-bi-cn=\"Share Share\" data-bi-ecn=\"Share Share\" data-bi-ct=\"socialshare\">\n\t\t\t\t\t\t\t<span aria-hidden=\"true\" class=\"microsoft-social-share-svg\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"32\" height=\"32\" fill=\"none\"><path stroke=\"var(--social-share-background-color)\" stroke-miterlimit=\"10\" stroke-width=\"2\" d=\"m18.274 24.009-4.003 4.002c-3.032 3.033-7.963 3.033-10.996 0s-3.033-7.964 0-10.997l4.002-4.002m3.981 6.995 9.016-8.995m-7.258-3.735 4.002-4.002c3.033-3.033 7.964-3.033 10.997 0s3.033 7.964 0 10.996l-4.003 4.003\"><\/path><\/svg><\/span>\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<span class=\"social-share__copy-notice\" data-wp-class--is-visible=\"state.isTooltipVisible\" data-wp-style----tooltip-shift=\"context.tooltipShift\" data-wp-init=\"callbacks.initTooltip\">\n\t\t\t\t\t\t\tLink copied to clipboard!\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/li>\n\t\t\t<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n<section class=\"wp-block-cover alignfull has-clear-blue-color has-text-color has-link-color wp-elements-564fc84ec74229bc996c71b27ee7e77a block-visibility-hide-small-screen\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid);min-height:600px;aspect-ratio:unset;\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-background-dim-0 has-background-dim\" style=\"background-color:#3c6081\"><\/span><img loading=\"lazy\" decoding=\"async\" width=\"2560\" height=\"767\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1.jpeg\" class=\"wp-block-cover__image-background wp-post-image\" alt=\"\" data-object-fit=\"cover\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1.jpeg 2560w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1-300x90.jpeg 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1-1024x307.jpeg 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1-768x230.jpeg 768w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1-1536x460.jpeg 1536w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1-2048x614.jpeg 2048w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\"><div class=\"wp-block-cover__inner-container has-global-padding is-layout-constrained wp-block-cover-is-layout-constrained\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-t683p67hl is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"t683p67hl\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-w79ty5kpl wp-container-content-432d1f4f is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-c8052ccb wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"w79ty5kpl\"><h2 class=\"wp-block-heading has-body-2-xl-plus-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/cybersecurity\/microsoft-digital-defense-report-2025\/\" data-bi-cn=\"research.codeghost.online\"><\/a><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/cybersecurity\/microsoft-digital-defense-report-2025\/\" data-bi-cn=\"Microsoft Digital Defense Report 2025\">Microsoft Digital Defense Report 2025<\/a><\/h2>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Discover the scale of cyber threats and the strategies&#8232;to defend against them<\/p>\n\n\n<div class=\"wp-block-buttons is-content-justification-space-between is-layout-flex wp-container-core-buttons-is-layout-5723d6ea wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link has-body-large-fluid-font-size has-custom-font-size wp-element-button has-inline-icon\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/cybersecurity\/microsoft-digital-defense-report-2025\/\" style=\"font-style:normal;font-weight:600\" data-bi-cn=\"Explore our annual report\">Explore our annual report<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/section>\n\n\n<section class=\"wp-block-cover alignfull has-custom-content-position is-position-bottom-center has-clear-blue-color has-text-color has-link-color wp-elements-af8aea0e65a0c865888456b9fbe64db1 block-visibility-hide-large-screen block-visibility-hide-medium-screen\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-background-dim-0 has-background-dim\" style=\"background-color:#3c6081\"><\/span><img loading=\"lazy\" decoding=\"async\" width=\"2560\" height=\"767\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1.jpeg\" class=\"wp-block-cover__image-background wp-post-image\" alt=\"\" data-object-fit=\"cover\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1.jpeg 2560w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1-300x90.jpeg 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1-1024x307.jpeg 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1-768x230.jpeg 768w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1-1536x460.jpeg 1536w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1-2048x614.jpeg 2048w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\"><div class=\"wp-block-cover__inner-container has-global-padding is-layout-constrained wp-container-core-cover-is-layout-e4aa7737 wp-block-cover-is-layout-constrained\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-w79ty5kpl wp-container-content-432d1f4f is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-56a3fadf wp-block-group-is-layout-flex\" style=\"padding-top:0;padding-bottom:0\" data-microsoft-breakpoint-id=\"w79ty5kpl\"><div style=\"height:0px\" aria-hidden=\"true\" class=\"wp-block-spacer wp-container-content-3d7cc20d\"><\/div>\n\n\n<h2 class=\"wp-block-heading has-body-2-xl-plus-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/cybersecurity\/microsoft-digital-defense-report-2025\/\" data-bi-cn=\"Microsoft Digital Defense Report 2025\">Microsoft Digital Defense Report 2025<\/a><\/h2>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Discover the scale of cyber threats and the strategies&#8232;to defend against them<\/p>\n\n\n<div class=\"wp-block-buttons is-content-justification-space-between is-layout-flex wp-container-core-buttons-is-layout-5723d6ea wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link has-body-large-fluid-font-size has-custom-font-size wp-element-button has-inline-icon\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/cybersecurity\/microsoft-digital-defense-report-2025\/\" style=\"font-style:normal;font-weight:600\" data-bi-cn=\"Explore our annual report\">Explore our annual report<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n<\/div><\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-clear-blue-fade-inverted-gradient-background has-background microsoft-breakpoint-id-yrdz2uuqg has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"yrdz2uuqg\"><div data-wp-context='{\"config\":{\"showOverflow\":true,\"responsive\":{\"mobile\":{\"enabled\":true,\"slidesPerViewMode\":\"fixed\",\"slidesPerView\":1,\"spaceBetween\":40,\"autoHeight\":false,\"loop\":false,\"autoplay\":false,\"autoplayDelay\":3000,\"navigation\":true,\"pagination\":false},\"tablet\":{\"enabled\":true,\"slidesPerViewMode\":\"fixed\",\"slidesPerView\":2,\"spaceBetween\":40,\"autoHeight\":false,\"loop\":false,\"autoplay\":false,\"autoplayDelay\":3000,\"navigation\":true,\"pagination\":false},\"desktop\":{\"enabled\":true,\"slidesPerViewMode\":\"fixed\",\"slidesPerView\":3,\"spaceBetween\":40,\"autoHeight\":false,\"loop\":false,\"autoplay\":false,\"autoplayDelay\":3000,\"navigation\":true,\"pagination\":false}}},\"type\":\"filter-carousel\"}' data-wp-init=\"actions.init\" data-wp-interactive=\"microsoft-core\/carousel\" data-wp-on-window--resize=\"actions.handleResize\" class=\"carousel-filter carousel-filter-scope-a7032df0 alignwide wp-block-microsoft-core-filter-carousel wp-block-carousel wp-block-carousel--allow-overflow\">\n\t\t\t<style>\n\t\t\t.carousel-filter-scope-a7032df0{--carousel-filter-background-color:#8dc8e8;--carousel-filter-background-color-hover:#2a446f;--carousel-filter-text-color-hover:#fff;--carousel-filter-background-color-active:#2a446f;--carousel-filter-text-color-active:#fff;}\t\t<\/style>\n\t\n\t\t\t<nav class=\"carousel-filter__list wp-block-carousel__filters\" aria-label=\"Filter posts\">\n\t\t\t\t\t\t\t<button type=\"button\" class=\"carousel-filter__button wp-block-carousel__filter-button is-active\" data-filter=\"all\" aria-pressed=\"true\" aria-controls=\"filter-carousel-1-items\">All<\/button>\n\t\t\t\t\t\t\t<button type=\"button\" class=\"carousel-filter__button wp-block-carousel__filter-button\" data-filter=\"cybersecurity\" aria-pressed=\"false\" aria-controls=\"filter-carousel-1-items\">Cybersecurity<\/button>\n\t\t\t\t\t\t\t<button type=\"button\" class=\"carousel-filter__button wp-block-carousel__filter-button\" data-filter=\"government\" aria-pressed=\"false\" aria-controls=\"filter-carousel-1-items\">Government<\/button>\n\t\t\t\t\t\t\t<button type=\"button\" class=\"carousel-filter__button wp-block-carousel__filter-button\" data-filter=\"industry\" aria-pressed=\"false\" aria-controls=\"filter-carousel-1-items\">Industry<\/button>\n\t\t\t\t\t\t\t<button type=\"button\" class=\"carousel-filter__button wp-block-carousel__filter-button\" data-filter=\"international-coalitions\" aria-pressed=\"false\" aria-controls=\"filter-carousel-1-items\">International Coalitions<\/button>\n\t\t\t\t\t\t\t<button type=\"button\" class=\"carousel-filter__button wp-block-carousel__filter-button\" data-filter=\"law-enforcement\" aria-pressed=\"false\" aria-controls=\"filter-carousel-1-items\">Law Enforcement<\/button>\n\t\t\t\t\t\t\t<button type=\"button\" class=\"carousel-filter__button wp-block-carousel__filter-button\" data-filter=\"policy-experts\" aria-pressed=\"false\" aria-controls=\"filter-carousel-1-items\">Policy Experts<\/button>\n\t\t\t\t\t<\/nav>\n\n\t\t<div class=\"carousel-filter__dropdown wp-block-carousel__filter-dropdown\">\n\t\t\t<label for=\"filter-carousel-1-select\" class=\"screen-reader-text\">\n\t\t\t\tFilter posts\t\t\t<\/label>\n\t\t\t<select id=\"filter-carousel-1-select\" class=\"carousel-filter__select wp-block-carousel__filter-select\" aria-controls=\"filter-carousel-1-items\">\n\t\t\t\t\t\t\t\t\t<option value=\"all\" selected>\n\t\t\t\t\t\tAll\t\t\t\t\t<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"cybersecurity\">\n\t\t\t\t\t\tCybersecurity\t\t\t\t\t<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"government\">\n\t\t\t\t\t\tGovernment\t\t\t\t\t<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"industry\">\n\t\t\t\t\t\tIndustry\t\t\t\t\t<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"international-coalitions\">\n\t\t\t\t\t\tInternational Coalitions\t\t\t\t\t<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"law-enforcement\">\n\t\t\t\t\t\tLaw Enforcement\t\t\t\t\t<\/option>\n\t\t\t\t\t\t\t\t\t<option value=\"policy-experts\">\n\t\t\t\t\t\tPolicy Experts\t\t\t\t\t<\/option>\n\t\t\t\t\t\t\t<\/select>\n\t\t<\/div>\n\n\t\t<p id=\"filter-carousel-1-status\" class=\"wp-block-carousel__status filter-carousel-status screen-reader-text\" role=\"status\" aria-live=\"polite\" aria-atomic=\"true\" data-singular=\"%d post shown\" data-plural=\"%d posts shown\"><\/p>\n\t\n\t<div id=\"filter-carousel-1-items\" class=\"wp-block-carousel__items filter-carousel-items\" aria-labelledby=\"filter-carousel-1-status\">\n\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"3553\" data-taxonomy-terms=\"policy-experts\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/five-disruptions-one-infrastructrure\/\" target=\"_self\" data-bi-cn=\"Five takedowns, one infrastructure: How Microsoft is tackling the cybercrime economy\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"630\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_Disruptions_1200x630.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Five takedowns, one infrastructure: How Microsoft is tackling the cybercrime economy\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_Disruptions_1200x630.jpg 1200w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_Disruptions_1200x630-300x158.jpg 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_Disruptions_1200x630-1024x538.jpg 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_Disruptions_1200x630-768x403.jpg 768w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/five-disruptions-one-infrastructrure\/\" target=\"_self\" data-bi-cn=\"Five takedowns, one infrastructure: How Microsoft is tackling the cybercrime economy\">Five takedowns, one infrastructure: How Microsoft is tackling the cybercrime economy<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/five-disruptions-one-infrastructrure\/\" target=\"_self\" data-bi-cn=\": Five takedowns, one infrastructure: How Microsoft is tackling the cybercrime economy\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: Five takedowns, one infrastructure: How Microsoft is tackling the cybercrime economy<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"3521\" data-taxonomy-terms=\"policy-experts\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/safeguarding-critical-water-infrastructure\/\" target=\"_self\" data-bi-cn=\"How security fundamentals safeguard critical water infrastructure\"><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_WaterUtilities_Still05.png\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"How security fundamentals safeguard critical water infrastructure\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_WaterUtilities_Still05.png 1920w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_WaterUtilities_Still05-300x169.png 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_WaterUtilities_Still05-1024x576.png 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_WaterUtilities_Still05-768x432.png 768w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/06\/CELA_WaterUtilities_Still05-1536x864.png 1536w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/safeguarding-critical-water-infrastructure\/\" target=\"_self\" data-bi-cn=\"How security fundamentals safeguard critical water infrastructure\">How security fundamentals safeguard critical water infrastructure<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/safeguarding-critical-water-infrastructure\/\" target=\"_self\" data-bi-cn=\": How security fundamentals safeguard critical water infrastructure\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: How security fundamentals safeguard critical water infrastructure<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"3402\" data-taxonomy-terms=\"government\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/five-things-about-ransomware\/\" target=\"_self\" data-bi-cn=\"Five things you need to know about ransomware\"><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"800\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/05\/CELA_RansomwareExplainer_1920x800.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Five things you need to know about ransomware\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/05\/CELA_RansomwareExplainer_1920x800.jpg 1920w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/05\/CELA_RansomwareExplainer_1920x800-300x125.jpg 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/05\/CELA_RansomwareExplainer_1920x800-1024x427.jpg 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/05\/CELA_RansomwareExplainer_1920x800-768x320.jpg 768w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/05\/CELA_RansomwareExplainer_1920x800-1536x640.jpg 1536w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/five-things-about-ransomware\/\" target=\"_self\" data-bi-cn=\"Five things you need to know about ransomware\">Five things you need to know about ransomware<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/five-things-about-ransomware\/\" target=\"_self\" data-bi-cn=\": Five things you need to know about ransomware\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: Five things you need to know about ransomware<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"3233\" data-taxonomy-terms=\"government international-coalitions\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/cyberspace-global-diplomacy\/\" target=\"_self\" data-bi-cn=\"Cyberspace and the future of global diplomacy\"><img loading=\"lazy\" decoding=\"async\" width=\"2560\" height=\"796\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/03\/Headshot_Hero_1920x800_option1-2-scaled.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Cyberspace and the future of global diplomacy\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/03\/Headshot_Hero_1920x800_option1-2-scaled.jpg 2560w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/03\/Headshot_Hero_1920x800_option1-2-300x93.jpg 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/03\/Headshot_Hero_1920x800_option1-2-1024x318.jpg 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/03\/Headshot_Hero_1920x800_option1-2-768x239.jpg 768w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/03\/Headshot_Hero_1920x800_option1-2-1536x478.jpg 1536w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/03\/Headshot_Hero_1920x800_option1-2-2048x637.jpg 2048w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/cyberspace-global-diplomacy\/\" target=\"_self\" data-bi-cn=\"Cyberspace and the future of global diplomacy\">Cyberspace and the future of global diplomacy<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/cyberspace-global-diplomacy\/\" target=\"_self\" data-bi-cn=\": Cyberspace and the future of global diplomacy\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: Cyberspace and the future of global diplomacy<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"3162\" data-taxonomy-terms=\"cybersecurity law-enforcement\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/redvds\/\" target=\"_self\" data-bi-cn=\"RedVDS and the Invisible Infrastructure of Modern Cybercrime\"><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"800\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/02\/CELA_RedVDS_1920x800.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"RedVDS and the Invisible Infrastructure of Modern Cybercrime\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/02\/CELA_RedVDS_1920x800.jpg 1920w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/02\/CELA_RedVDS_1920x800-300x125.jpg 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/02\/CELA_RedVDS_1920x800-1024x427.jpg 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/02\/CELA_RedVDS_1920x800-768x320.jpg 768w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/02\/CELA_RedVDS_1920x800-1536x640.jpg 1536w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/redvds\/\" target=\"_self\" data-bi-cn=\"RedVDS and the Invisible Infrastructure of Modern Cybercrime\">RedVDS and the Invisible Infrastructure of Modern Cybercrime<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/redvds\/\" target=\"_self\" data-bi-cn=\": RedVDS and the Invisible Infrastructure of Modern Cybercrime\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: RedVDS and the Invisible Infrastructure of Modern Cybercrime<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"2643\" data-taxonomy-terms=\"cybersecurity law-enforcement\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/raccoono365\/\" target=\"_self\" data-bi-cn=\"Inside the takedown of RaccoonO365: How Phishing-as-a-Service fuels ransomware&rsquo;s engine\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"630\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CELA_RaccoonO365_1200x630.png\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Inside the takedown of RaccoonO365: How Phishing-as-a-Service fuels ransomware&rsquo;s engine\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CELA_RaccoonO365_1200x630.png 1200w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CELA_RaccoonO365_1200x630-300x158.png 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CELA_RaccoonO365_1200x630-1024x538.png 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CELA_RaccoonO365_1200x630-768x403.png 768w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/raccoono365\/\" target=\"_self\" data-bi-cn=\"Inside the takedown of RaccoonO365: How Phishing-as-a-Service fuels ransomware&rsquo;s engine\">Inside the takedown of RaccoonO365: How Phishing-as-a-Service fuels ransomware&rsquo;s engine<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/raccoono365\/\" target=\"_self\" data-bi-cn=\": Inside the takedown of RaccoonO365: How Phishing-as-a-Service fuels ransomware&rsquo;s engine\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: Inside the takedown of RaccoonO365: How Phishing-as-a-Service fuels ransomware&rsquo;s engine<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"2432\" data-taxonomy-terms=\"cybersecurity\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/preparing-for-the-quantum-unknown\/\" target=\"_self\" data-bi-cn=\"Preparing for the quantum unknown\"><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"800\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/quantum-header-v1.png\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Preparing for the quantum unknown\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/quantum-header-v1.png 1920w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/quantum-header-v1-300x125.png 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/quantum-header-v1-1024x427.png 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/quantum-header-v1-768x320.png 768w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/quantum-header-v1-1536x640.png 1536w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/preparing-for-the-quantum-unknown\/\" target=\"_self\" data-bi-cn=\"Preparing for the quantum unknown\">Preparing for the quantum unknown<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/preparing-for-the-quantum-unknown\/\" target=\"_self\" data-bi-cn=\": Preparing for the quantum unknown\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: Preparing for the quantum unknown<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"2453\" data-taxonomy-terms=\"cybersecurity industry\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/what-is-caas\/\" target=\"_self\" data-bi-cn=\"Cybercrime-as-a-Service, Explained\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"400\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/CaaSexplainer_heroart_shadowtechindustry-e1765307399142.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Cybercrime-as-a-Service, Explained\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/CaaSexplainer_heroart_shadowtechindustry-e1765307399142.jpg 800w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/CaaSexplainer_heroart_shadowtechindustry-e1765307399142-300x150.jpg 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/CaaSexplainer_heroart_shadowtechindustry-e1765307399142-768x384.jpg 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/what-is-caas\/\" target=\"_self\" data-bi-cn=\"Cybercrime-as-a-Service, Explained\">Cybercrime-as-a-Service, Explained<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/what-is-caas\/\" target=\"_self\" data-bi-cn=\": Cybercrime-as-a-Service, Explained\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: Cybercrime-as-a-Service, Explained<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"3040\" data-taxonomy-terms=\"international-coalitions\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/aka.ms\/QSP\/policy-2025\" target=\"_self\" data-bi-cn=\"Post-quantum resilience: building secure foundations\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/6103442_FY26-Q1-Cybersecurity-Quantum-Blog-Header_V2-1-1024x576-1.webp\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Post-quantum resilience: building secure\nfoundations\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/6103442_FY26-Q1-Cybersecurity-Quantum-Blog-Header_V2-1-1024x576-1.webp 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/6103442_FY26-Q1-Cybersecurity-Quantum-Blog-Header_V2-1-1024x576-1-300x169.webp 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/6103442_FY26-Q1-Cybersecurity-Quantum-Blog-Header_V2-1-1024x576-1-768x432.webp 768w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/aka.ms\/QSP\/policy-2025\" target=\"_self\" data-bi-cn=\"Post-quantum resilience: building secure foundations\">Post-quantum resilience: building secure\nfoundations<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/aka.ms\/QSP\/policy-2025\" target=\"_self\" data-bi-cn=\": Post-quantum resilience: building secure foundations\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: Post-quantum resilience: building secure\nfoundations<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"2438\" data-taxonomy-terms=\"cybersecurity policy-experts\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/5-things-threat-analyst\/\" target=\"_self\" data-bi-cn=\"5 things you need to know about tracking today&rsquo;s nation-state threats\"><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"900\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/CELA_MTAC5Things_heroart-e1765307489638.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"5 things you need to know about tracking today&rsquo;s nation-state threats\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/CELA_MTAC5Things_heroart-e1765307489638.jpg 1920w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/CELA_MTAC5Things_heroart-e1765307489638-300x141.jpg 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/CELA_MTAC5Things_heroart-e1765307489638-1024x480.jpg 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/CELA_MTAC5Things_heroart-e1765307489638-768x360.jpg 768w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2025\/12\/CELA_MTAC5Things_heroart-e1765307489638-1536x720.jpg 1536w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/5-things-threat-analyst\/\" target=\"_self\" data-bi-cn=\"5 things you need to know about tracking today&rsquo;s nation-state threats\">5 things you need to know about tracking today&rsquo;s nation-state threats<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/stories\/5-things-threat-analyst\/\" target=\"_self\" data-bi-cn=\": 5 things you need to know about tracking today&rsquo;s nation-state threats\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: 5 things you need to know about tracking today&rsquo;s nation-state threats<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"wp-block-carousel__item filter-carousel-item\" data-post-id=\"3037\" data-taxonomy-terms=\"law-enforcement\">\n\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-lwvhlcjc1 is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-388f7023 wp-block-group-is-layout-flex\" style=\"min-height:100%;cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\"a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"lwvhlcjc1\"><figure style=\"aspect-ratio:16\/9\" class=\"wp-block-post-featured-image\"><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/05\/21\/microsoft-leads-global-action-against-favored-cybercrime-tool\/\" target=\"_self\" data-bi-cn=\"Disrupting Lumma Stealer\"><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/FY25_Q4_PA_Cybersecurity__Blog-Header.webp\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Disrupting Lumma Stealer\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/FY25_Q4_PA_Cybersecurity__Blog-Header.webp 1920w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/FY25_Q4_PA_Cybersecurity__Blog-Header-300x169.webp 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/FY25_Q4_PA_Cybersecurity__Blog-Header-1024x576.webp 1024w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/FY25_Q4_PA_Cybersecurity__Blog-Header-768x432.webp 768w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/FY25_Q4_PA_Cybersecurity__Blog-Header-1536x864.webp 1536w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-oqmyk4ud2 wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-05be58a3 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"oqmyk4ud2\"><h3 class=\"wp-block-post-title has-body-xl-fluid-font-size\"><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/05\/21\/microsoft-leads-global-action-against-favored-cybercrime-tool\/\" target=\"_self\" data-bi-cn=\"Disrupting Lumma Stealer\">Disrupting Lumma Stealer<\/a><\/h3>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-9bpjhvwne is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-f726d978 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"9bpjhvwne\"><a class=\"wp-block-read-more\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/05\/21\/microsoft-leads-global-action-against-favored-cybercrime-tool\/\" target=\"_self\" data-bi-cn=\": Disrupting Lumma Stealer\"><svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><span class=\"screen-reader-text\">: Disrupting Lumma Stealer<\/span><\/a>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t\t\t<\/div>\n<\/div>\n<\/section>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignfull has-black-color has-deep-blue-background-color has-text-color has-background has-link-color microsoft-breakpoint-id-3fjji1itm wp-elements-0d81a7613130fa719ffc26fded2f341b has-global-padding is-layout-constrained wp-container-core-group-is-layout-5da7a39d wp-block-group-is-layout-constrained\" id=\"timeline\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"3fjji1itm\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-s6jlib5va layout-ruled-split-intro is-layout-grid wp-container-core-group-is-layout-5a23bf8e wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"s6jlib5va\"><h2 class=\"wp-block-heading has-clear-blue-color has-text-color has-link-color has-body-2-xl-plus-fluid-font-size wp-elements-4d768cc30508b13e152824514a3ca46e\" style=\"border-top-color:var(--wp--preset--color--clear-blue);border-top-width:2px;padding-top:var(--wp--preset--spacing--sm)\">Microsoft&rsquo;s Digital Crimes Unit<\/h2>\n\n\n<p class=\"has-clear-blue-color has-text-color has-link-color wp-elements-1bfe634cd8622c56c024c373b5c1c5ac wp-block-paragraph\" style=\"padding-top:0;padding-bottom:0\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/customer-security-trust\/digital-crimes-unit\" data-bi-cn=\"Microsoft&rsquo;s Digital Crimes Unit (DCU)\">Microsoft&rsquo;s Digital Crimes Unit (DCU) <\/a>uses court-authorized civil litigation and technical action to disrupt cybercriminal and nation-state infrastructure. This timeline highlights decades of DCU operations and recognizes that cybercrime disruption is often continuous, not one-and-done, as adversaries adapt. These actions protect victims by stopping active harm, enabling remediation, and preventing further losses&mdash;while imposing real costs on criminals by dismantling infrastructure, disrupting revenue streams, and forcing them to rebuild at greater risk and expense.<\/p>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignfull has-brown-black-color has-soft-sky-glow-gradient-background has-text-color has-background has-link-color microsoft-breakpoint-id-0sqm00sgd wp-elements-030da669f09fb5efa210fc567c0a7a48 has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"0sqm00sgd\"><div id=\"timeline-skip-2-start\" tabindex=\"-1\" style=\"--tag-id-bg-tag-k0jvx7t: #8dc8e8;--tag-id-fg-tag-k0jvx7t: #000;--tag-id-bg-tag-duhcisk: #b9dcd2;--tag-id-fg-tag-duhcisk: #000;--tag-id-bg-tag-cos2gjr: #c5b4e3;--tag-id-fg-tag-cos2gjr: var(--tag-fg-background);--tag-id-bg-tag-3gf5rgd: #ffa38b;--tag-id-fg-tag-3gf5rgd: var(--tag-fg-background);--tag-id-bg-tag-30wvzs9: #a0d2c7;--tag-id-fg-tag-30wvzs9: var(--tag-fg-background);--tag-id-bg-tag-5utjqi0: #ffe399;--tag-id-fg-tag-5utjqi0: var(--tag-fg-background)\" class=\"alignwide wp-block-microsoft-timeline-timeline\" aria-live=\"polite\">\n\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-ke2qwa7t8 is-horizontal is-nowrap is-layout-flex wp-container-core-group-is-layout-db084d37 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"ke2qwa7t8\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-7ruit4a0m is-layout-flow wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"7ruit4a0m\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-926ix1ncv has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-e2d77b78 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"926ix1ncv\"><hr class=\"wp-block-separator has-alpha-channel-opacity\">\n<\/div>\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Disrupting cyberthreats since 2008<\/h2>\n\n\n<p class=\"wp-block-paragraph\" style=\"margin-bottom:var(--wp--preset--spacing--2-xl-fluid)\">For more than a decade, Microsoft&rsquo;s DCU has persistently disrupted cybercrime and nation&#8209;state threats targeting people, organizations and critical infrastructure. Explore major disruptions and the often&#8209;ongoing cases and operations behind them.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-secondary\"><a data-bi-ct=\"button\" class=\"wp-block-button__link has-custom-font-size wp-element-button has-inline-icon\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/disrupting-cyberthreats-since-2008\/\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.9px) * 0.189), 16px)\" data-bi-cn=\"Explore the detailed timeline\">Explore the detailed timeline<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n\n<div style=\"height:68px\" aria-hidden=\"true\" class=\"wp-block-spacer block-visibility-hide-small-screen\"><\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-kwvndwstv wp-container-content-e29552f7 is-nowrap is-layout-flex wp-container-core-group-is-layout-67eca248 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"kwvndwstv\"><a href=\"#timeline-skip-2-filters\" class=\"wp-element-button wp-block-microsoft-timeline-timeline__skip-link\" data-bi-cn=\"Skip to filters\">\n\tSkip to filters<\/a><a href=\"#timeline-skip-2-end\" class=\"wp-element-button wp-block-microsoft-timeline-timeline__skip-link\" data-bi-cn=\"Skip timeline section\">\n\tSkip timeline section<\/a><div class=\"wp-block-microsoft-timeline-timeline-years\" data-mode=\"single\">\n\t<dl class=\"timeline__line\">\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 4\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2026\">\n\t\t\t\t\t\t<span>2026<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#amadey-stealc\" aria-label=\"Navigate to Amadey-StealC\" data-event-index=\"0\" class=\"is-selected\" aria-current=\"true\" data-bi-cn=\"Navigate to Amadey-StealC\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#fox-tempest\" aria-label=\"Navigate to Fox Tempest\" data-event-index=\"1\" data-bi-cn=\"Navigate to Fox Tempest\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 3\">\n\t\t\t\t\t\t<a href=\"#tycoon-2fa\" aria-label=\"Navigate to Tycoon 2FA\" data-event-index=\"2\" data-bi-cn=\"Navigate to Tycoon 2FA\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 4\">\n\t\t\t\t\t\t<a href=\"#redvds\" aria-label=\"Navigate to RedVDS\" data-event-index=\"3\" data-bi-cn=\"Navigate to RedVDS\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 2\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2025\">\n\t\t\t\t\t\t<span>2025<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#raccoono365\" aria-label=\"Navigate to RaccoonO365\" data-event-index=\"4\" data-bi-cn=\"Navigate to RaccoonO365\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#lumma-stealer\" aria-label=\"Navigate to Lumma Stealer\" data-event-index=\"5\" data-bi-cn=\"Navigate to Lumma Stealer\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 3\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2024\">\n\t\t\t\t\t\t<span>2024<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#fizzdogg\" aria-label=\"Navigate to FizzDogg\" data-event-index=\"6\" data-bi-cn=\"Navigate to FizzDogg\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#fake-onnx\" aria-label=\"Navigate to Fake ONNX\" data-event-index=\"7\" data-bi-cn=\"Navigate to Fake ONNX\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 3\">\n\t\t\t\t\t\t<a href=\"#star-blizzard\" aria-label=\"Navigate to Star Blizzard\" data-event-index=\"8\" data-bi-cn=\"Navigate to Star Blizzard\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 2\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2023\">\n\t\t\t\t\t\t<span>2023<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#storm-1152\" aria-label=\"Navigate to Storm-1152\" data-event-index=\"9\" data-bi-cn=\"Navigate to Storm-1152\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#cracked-cobalt-strike\" aria-label=\"Navigate to Cracked Cobalt Strike\" data-event-index=\"10\" data-bi-cn=\"Navigate to Cracked Cobalt Strike\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 2\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2022\">\n\t\t\t\t\t\t<span>2022<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#smoke-sandstorm\" aria-label=\"Navigate to Smoke Sandstorm\" data-event-index=\"11\" data-bi-cn=\"Navigate to Smoke Sandstorm\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#zloader\" aria-label=\"Navigate to ZLoader\" data-event-index=\"12\" data-bi-cn=\"Navigate to ZLoader\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 2\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2021\">\n\t\t\t\t\t\t<span>2021<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#nylon-typhoon\" aria-label=\"Navigate to Nylon Typhoon\" data-event-index=\"13\" data-bi-cn=\"Navigate to Nylon Typhoon\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#emotet\" aria-label=\"Navigate to Emotet\" data-event-index=\"14\" data-bi-cn=\"Navigate to Emotet\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 3\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2020\">\n\t\t\t\t\t\t<span>2020<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#trickbot\" aria-label=\"Navigate to Trickbot\" data-event-index=\"15\" data-bi-cn=\"Navigate to Trickbot\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#necurs\" aria-label=\"Navigate to Necurs\" data-event-index=\"16\" data-bi-cn=\"Navigate to Necurs\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 3\">\n\t\t\t\t\t\t<a href=\"#necurs\" aria-label=\"Navigate to Necurs\" data-event-index=\"17\" data-bi-cn=\"Navigate to Necurs\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 2\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2019\">\n\t\t\t\t\t\t<span>2019<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#emerald-sleet\" aria-label=\"Navigate to Emerald Sleet\" data-event-index=\"18\" data-bi-cn=\"Navigate to Emerald Sleet\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#mint-sandstorm\" aria-label=\"Navigate to Mint Sandstorm\" data-event-index=\"19\" data-bi-cn=\"Navigate to Mint Sandstorm\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2018\">\n\t\t\t\t\t\t<span>2018<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 3\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2017\">\n\t\t\t\t\t\t<span>2017<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#gamarue\" aria-label=\"Navigate to Gamarue\" data-event-index=\"20\" data-bi-cn=\"Navigate to Gamarue\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#avalanche\" aria-label=\"Navigate to Avalanche\" data-event-index=\"21\" data-bi-cn=\"Navigate to Avalanche\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 3\">\n\t\t\t\t\t\t<a href=\"#brass-typhoon\" aria-label=\"Navigate to Brass Typhoon\" data-event-index=\"22\" data-bi-cn=\"Navigate to Brass Typhoon\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 1\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2016\">\n\t\t\t\t\t\t<span>2016<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#forest-blizzard\" aria-label=\"Navigate to Forest Blizzard\" data-event-index=\"23\" data-bi-cn=\"Navigate to Forest Blizzard\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 3\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2015\">\n\t\t\t\t\t\t<span>2015<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#dorkbot\" aria-label=\"Navigate to Dorkbot\" data-event-index=\"24\" data-bi-cn=\"Navigate to Dorkbot\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#simda\" aria-label=\"Navigate to Simda\" data-event-index=\"25\" data-bi-cn=\"Navigate to Simda\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 3\">\n\t\t\t\t\t\t<a href=\"#ramnit\" aria-label=\"Navigate to Ramnit\" data-event-index=\"26\" data-bi-cn=\"Navigate to Ramnit\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 3\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2014\">\n\t\t\t\t\t\t<span>2014<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#caphaw\" aria-label=\"Navigate to Caphaw\" data-event-index=\"27\" data-bi-cn=\"Navigate to Caphaw\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#gameover-zeus\" aria-label=\"Navigate to GameOver Zeus\" data-event-index=\"28\" data-bi-cn=\"Navigate to GameOver Zeus\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 3\">\n\t\t\t\t\t\t<a href=\"#bladabindi-jenxcus\" aria-label=\"Navigate to Bladabindi &amp; Jenxcus\" data-event-index=\"29\" data-bi-cn=\"Navigate to Bladabindi &amp;amp; Jenxcus\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 3\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2013\">\n\t\t\t\t\t\t<span>2013<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#zeroaccess\" aria-label=\"Navigate to ZeroAccess\" data-event-index=\"30\" data-bi-cn=\"Navigate to ZeroAccess\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#citadel\" aria-label=\"Navigate to Citadel\" data-event-index=\"31\" data-bi-cn=\"Navigate to Citadel\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 3\">\n\t\t\t\t\t\t<a href=\"#bamital\" aria-label=\"Navigate to Bamital\" data-event-index=\"32\" data-bi-cn=\"Navigate to Bamital\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 2\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2012\">\n\t\t\t\t\t\t<span>2012<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#nitol\" aria-label=\"Navigate to Nitol\" data-event-index=\"33\" data-bi-cn=\"Navigate to Nitol\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#zeus\" aria-label=\"Navigate to Zeus\" data-event-index=\"34\" data-bi-cn=\"Navigate to Zeus\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 2\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2011\">\n\t\t\t\t\t\t<span>2011<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#kelihos\" aria-label=\"Navigate to Kelihos\" data-event-index=\"35\" data-bi-cn=\"Navigate to Kelihos\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#rustock\" aria-label=\"Navigate to Rustock\" data-event-index=\"36\" data-bi-cn=\"Navigate to Rustock\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"timeline__group\" style=\"--timeline-events-per-group: 2\">\n\t\t\t\t<dt class=\"timeline__year\">\n\t\t\t\t\t<time datetime=\"2010\">\n\t\t\t\t\t\t<span>2010<\/span>\n\t\t\t\t\t<\/time>\n\t\t\t\t<\/dt>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 1\">\n\t\t\t\t\t\t<a href=\"#conficker\" aria-label=\"Navigate to Conficker\" data-event-index=\"37\" data-bi-cn=\"Navigate to Conficker\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<dd class=\"timeline__events\" style=\"--timeline-event-index: 2\">\n\t\t\t\t\t\t<a href=\"#waledac\" aria-label=\"Navigate to Waledac\" data-event-index=\"38\" data-bi-cn=\"Navigate to Waledac\">\n\t\t\t\t\t\t\t<span class=\"marker\"><\/span>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/dd>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/dl>\n\t\t\t\t\t\t<span class=\"timeline__tooltip is-initializing\">\n\t\t\t<span class=\"timeline__tooltip-label\">\n\t\t\t\t<span>Click or scroll to explore the timeline.<\/span>\n\t\t\t<\/span>\n\t\t\t<button type=\"button\" class=\"timeline__tooltip-icon\" aria-label=\"More information\">i<\/button>\n\t\t<\/span>\n\t<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-pqqqy202u is-vertical is-content-justification-left is-layout-flex wp-container-core-group-is-layout-284389e6 wp-block-group-is-layout-flex\" style=\"min-height:530px\" data-microsoft-breakpoint-id=\"pqqqy202u\"><div style=\"height:0px\" aria-hidden=\"true\" class=\"wp-block-spacer wp-container-content-9760934e\"><\/div>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"amadey-stealc\" data-tags='[\"cybercrime-tools-and-services\",\"ransomware\",\"malware\"]' data-search=\"amadey-stealc cybercrime tools and services ransomware malware amadey-stealc cybercrime tools and services ransomware malware amadey and stealc are separate malware operations that shared infrastructure. using copilot, dcu uncovered the connection in minutes, enabling a rico case targeting the broader criminal network. by combining ai, legal action, and partnerships, microsoft is making cybercrime harder to scale. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">June 2026<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Amadey-StealC<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-30wvzs9, #a0d2c7);color: var(--tag-id-fg-tag-30wvzs9, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-30wvzs9\">\n\tRansomware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Amadey and StealC are separate malware operations that shared infrastructure. Using Copilot, DCU uncovered the connection in minutes, enabling a RICO case targeting the broader criminal network. By combining AI, legal action, and partnerships, Microsoft is making cybercrime harder to scale.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"http:\/\/Aka.ms\/Amadey-StealC-Disruption\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn more\">Learn more <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"fox-tempest\" data-tags='[\"ransomware\",\"cybercrime-tools-and-services\",\"malware\"]' data-search=\"fox tempest ransomware cybercrime tools and services malware fox tempest ransomware cybercrime tools and services malware fox tempest is a sophisticated cybercrime operation that abused malicious code signing and trusted development infrastructure to enable the deployment of malicious code&mdash;including ransomware&mdash;at scale. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">May 2026<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Fox Tempest<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-30wvzs9, #a0d2c7);color: var(--tag-id-fg-tag-30wvzs9, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-30wvzs9\">\n\tRansomware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Fox Tempest is a sophisticated cybercrime operation that abused malicious code signing and trusted development infrastructure to enable the deployment of malicious code&mdash;including ransomware&mdash;at scale.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/FOX-Tempest-disruption\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn more\">Learn more <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"tycoon-2fa\" data-tags='[\"cybercrime-tools-and-services\",\"fraud\"]' data-search=\"tycoon 2fa cybercrime tools and services fraud tycoon 2fa cybercrime tools and services fraud tycoon 2fa is a phishing&#8209;as&#8209;a&#8209;service operation that lets cybercriminals impersonate users and access email and online services&mdash;even with mfa enabled. it reflects a broader shift in cybercrime: identity is now the primary target, where one account can unlock entire digital ecosystems. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">February 2026<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Tycoon 2FA<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Tycoon 2FA is a phishing&#8209;as&#8209;a&#8209;service operation that lets cybercriminals impersonate users and access email and online services&mdash;even with MFA enabled. It reflects a broader shift in cybercrime: identity is now the primary target, where one account can unlock entire digital ecosystems.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/nam06.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fblogs.microsoft.com%2Fon-the-issues%2F2026%2F03%2F04%2Fhow-a-global-coalition-disrupted-tycoon%2F&amp;data=05%7C02%7Cv-flmiller%40microsoft.com%7C56f7799646124ec3258b08de7adb596a%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639083279739755169%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;sdata=eKVy9mYWxweNxeSDlQPsba2tYdlwVfJLz1fe34CvcEc%3D&amp;reserved=0\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn more\">Learn more <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"redvds\" data-tags='[\"cybercrime-tools-and-services\",\"fraud\",\"ai-abuse\"]' data-search=\"redvds cybercrime tools and services fraud ai abuse redvds cybercrime tools and services fraud ai abuse redvds was a subscription-based service that enabled cybercriminals to run mass phishing, account takeovers, and financial fraud using anonymous virtual machines, amplified by ai-driven face-swapping, voice cloning, and video manipulation to enhance deception. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">January 2026<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">RedVDS<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-cos2gjr, #c5b4e3);color: var(--tag-id-fg-tag-cos2gjr, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-cos2gjr\">\n\tAI abuse<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">RedVDS was a subscription-based service that enabled cybercriminals to run mass phishing, account takeovers, and financial fraud using anonymous virtual machines, amplified by AI-driven face-swapping, voice cloning, and video manipulation to enhance deception.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2026\/01\/14\/microsoft-disrupts-cybercrime\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn more\">Learn more <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"raccoono365\" data-tags='[\"cybercrime-tools-and-services\",\"fraud\",\"ai-abuse\"]' data-search=\"raccoono365 cybercrime tools and services fraud ai abuse raccoono365 cybercrime tools and services fraud ai abuse raccoono365 was a phishing-as-a-service threat that used ai-assisted tooling, realistic lures, and captcha evasion to harvest microsoft 365 credentials at scale, lowering the barrier for criminals to launch highly convincing attacks. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">September 2025<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">RaccoonO365<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-cos2gjr, #c5b4e3);color: var(--tag-id-fg-tag-cos2gjr, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-cos2gjr\">\n\tAI abuse<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">RaccoonO365 was a phishing-as-a-service threat that used AI-assisted tooling, realistic lures, and CAPTCHA evasion to harvest Microsoft 365 credentials at scale, lowering the barrier for criminals to launch highly convincing attacks.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/raccoono365\/\" style=\"font-style:normal;font-weight:600\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"lumma-stealer\" data-tags='[\"malware\",\"ransomware\",\"cybercrime-tools-and-services\"]' data-search=\"lumma stealer malware ransomware cybercrime tools and services lumma&nbsp;stealer malware ransomware cybercrime tools and services lumma stealer industrialized data theft by pairing malware-as-a-service with ai-enabled social engineering, automated loaders, and adaptive infrastructure, allowing criminals to steal credentials and sensitive information with minimal effort. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">May 2025<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Lumma&nbsp;Stealer<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-30wvzs9, #a0d2c7);color: var(--tag-id-fg-tag-30wvzs9, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-30wvzs9\">\n\tRansomware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Lumma Stealer industrialized data theft by pairing malware-as-a-service with AI-enabled social engineering, automated loaders, and adaptive infrastructure, allowing criminals to steal credentials and sensitive information with minimal effort.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/05\/21\/microsoft-leads-global-action-against-favored-cybercrime-tool\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"fizzdogg\" data-tags='[\"ai-abuse\",\"cybercrime-tools-and-services\"]' data-search=\"fizzdogg ai abuse cybercrime tools and services fizzdogg ai abuse cybercrime tools and services fizzdogg, tracked as storm&#8209;2139, ran a cybercrime&#8209;as&#8209;a&#8209;service that weaponized generative ai&mdash;bypassing safeguards and monetizing illicit access to produce and share harmful, policy&#8209;violating images at scale. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">December 2024<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">FizzDogg<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-cos2gjr, #c5b4e3);color: var(--tag-id-fg-tag-cos2gjr, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-cos2gjr\">\n\tAI abuse<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">FizzDogg, tracked as Storm&#8209;2139, ran a cybercrime&#8209;as&#8209;a&#8209;service that weaponized generative AI&mdash;bypassing safeguards and monetizing illicit access to produce and share harmful, policy&#8209;violating images at scale.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/news.microsoft.com\/source\/features\/ai\/how-microsoft-is-taking-down-ai-hackers-who-create-harmful-images-of-celebrities-and-others\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"fake-onnx\" data-tags='[\"cybercrime-tools-and-services\",\"fraud\"]' data-search=\"fake onnx cybercrime tools and services fraud fake onnx cybercrime tools and services fraud fake onnx, also known as caffeine, was a phishing-as-a-service threat that fraudulently used the onnx name to sell diy phishing kits, enabling large-scale credential theft by industrializing mfa bypass and adversary-in-the-middle attack techniques. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">November 2024<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Fake ONNX<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Fake ONNX, also known as Caffeine, was a phishing-as-a-service threat that fraudulently used the ONNX name to sell DIY phishing kits, enabling large-scale credential theft by industrializing MFA bypass and adversary-in-the-middle attack techniques.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2024\/11\/21\/targeting-the-cybercrime-supply-chain\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"star-blizzard\" data-tags='[\"nation-state\"]' data-search=\"star blizzard nation-state star blizzard nation-state star blizzard is a russian nation-state threat that uses targeted spear-phishing and credential theft to exfiltrate sensitive information and interfere with the work of journalists, think tanks, ngos, and other civil society organizations critical to democratic processes. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">September 2024<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Star Blizzard<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-5utjqi0, #ffe399);color: var(--tag-id-fg-tag-5utjqi0, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-5utjqi0\">\n\tnation-state<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Star Blizzard is a Russian nation-state threat that uses targeted spear-phishing and credential theft to exfiltrate sensitive information and interfere with the work of journalists, think tanks, NGOs, and other civil society organizations critical to democratic processes.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2024\/10\/03\/protecting-democratic-institutions-from-cyber-threats\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"storm-1152\" data-tags='[\"fraud\",\"ai-abuse\",\"cybercrime-tools-and-services\"]' data-search=\"storm-1152 fraud ai abuse cybercrime tools and services storm-1152 fraud ai abuse cybercrime tools and services storm-1152 is a cybercrime-as-a-service threat that acts as a gateway to cybercrime by using highly automated, ai-assisted tools to create and sell massive volumes of fraudulent microsoft accounts, enabling phishing, fraud, identity theft, and other abuse at scale. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">December 2023<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Storm-1152<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-cos2gjr, #c5b4e3);color: var(--tag-id-fg-tag-cos2gjr, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-cos2gjr\">\n\tAI abuse<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Storm-1152 is a cybercrime-as-a-service threat that acts as a gateway to cybercrime by using highly automated, AI-assisted tools to create and sell massive volumes of fraudulent Microsoft accounts, enabling phishing, fraud, identity theft, and other abuse at scale.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2023\/12\/13\/cybercrime-cybersecurity-storm-1152-fraudulent-accounts\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noopener noreferrer\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"cracked-cobalt-strike\" data-tags='[\"cybercrime-tools-and-services\",\"ransomware\",\"malware\"]' data-search=\"cracked cobalt strike cybercrime tools and services ransomware malware cracked cobalt strike cybercrime tools and services ransomware malware cracked cobalt strike refers to illegally modified, legacy versions of fortra&rsquo;s legitimate security tool that cybercriminals repurposed to enable automated command-and-control, lateral movement, and ransomware deployment at scale across victim networks. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">April 2023<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Cracked Cobalt Strike<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-30wvzs9, #a0d2c7);color: var(--tag-id-fg-tag-30wvzs9, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-30wvzs9\">\n\tRansomware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Cracked Cobalt Strike refers to illegally modified, legacy versions of Fortra&rsquo;s legitimate security tool that cybercriminals repurposed to enable automated command-and-control, lateral movement, and ransomware deployment at scale across victim networks.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2023\/04\/06\/stopping-cybercriminals-from-abusing-security-tools\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"smoke-sandstorm\" data-tags='[\"nation-state\"]' data-search=\"smoke sandstorm nation-state smoke sandstorm nation-state smoke sandstorm is an iranian nation-state threat that uses targeted spear-phishing and social-engineering lures&mdash;often posing as recruiters&mdash;to compromise email accounts and gain persistent access for espionage across government, defense, and critical sectors. previously tracked as bohrium. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">May 2022<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Smoke Sandstorm<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-5utjqi0, #ffe399);color: var(--tag-id-fg-tag-5utjqi0, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-5utjqi0\">\n\tnation-state<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Smoke Sandstorm is an Iranian nation-state threat that uses targeted spear-phishing and social-engineering lures&mdash;often posing as recruiters&mdash;to compromise email accounts and gain persistent access for espionage across government, defense, and critical sectors. Previously tracked as Bohrium.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/research.codeghost.online\/en-us\/security\/security-insider\/threat-landscape\/smoke-sandstorm\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"zloader\" data-tags='[\"malware\",\"ransomware\",\"cybercrime-tools-and-services\"]' data-search=\"zloader malware ransomware cybercrime tools and services zloader malware ransomware cybercrime tools and services zloader is a malware-as-a-service botnet operated by an organized criminal gang whose goal is to steal and extort money by disabling security tools and distributing follow-on malware, including ransomware, across infected devices worldwide. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">April 2022<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">ZLoader<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-30wvzs9, #a0d2c7);color: var(--tag-id-fg-tag-30wvzs9, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-30wvzs9\">\n\tRansomware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">ZLoader is a malware-as-a-service botnet operated by an organized criminal gang whose goal is to steal and extort money by disabling security tools and distributing follow-on malware, including ransomware, across infected devices worldwide.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2022\/04\/13\/zloader-botnet-disrupted-malware-ukraine\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"nylon-typhoon\" data-tags='[\"nation-state\"]' data-search=\"nylon typhoon nation-state nylon typhoon nation-state nylon typhoon is a china based nation-state cyberespionage threat that exploits unpatched systems and remote access services to steal credentials and maintain long-term access, primarily targeting governments, diplomatic organizations and ngos for intelligence collection. previously tracked as nickel. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">December 2021<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Nylon Typhoon<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-5utjqi0, #ffe399);color: var(--tag-id-fg-tag-5utjqi0, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-5utjqi0\">\n\tnation-state<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Nylon Typhoon is a China based nation-state cyberespionage threat that exploits unpatched systems and remote access services to steal credentials and maintain long-term access, primarily targeting governments, diplomatic organizations and NGOs for intelligence collection. Previously tracked as Nickel.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2021\/12\/06\/cyberattacks-nickel-dcu-china\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"emotet\" data-tags='[\"malware\"]' data-search=\"emotet malware emotet malware emotet is a globally dispersed banking trojan and malware distribution botnet that spreads via spam and phishing emails, harvesting credentials, installing persistent backdoors, and delivering additional malware. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">March 2021<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Emotet<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Emotet is a globally dispersed banking trojan and malware distribution botnet that spreads via spam and phishing emails, harvesting credentials, installing persistent backdoors, and delivering additional malware.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/www.europol.europa.eu\/media-press\/newsroom\/news\/world%e2%80%99s-most-dangerous-malware-emotet-disrupted-through-global-action\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"trickbot\" data-tags='[\"malware\",\"ransomware\",\"cybercrime-tools-and-services\"]' data-search=\"trickbot malware ransomware cybercrime tools and services trickbot malware ransomware cybercrime tools and services trickbot was a globally dispersed banking trojan and malware distribution botnet that spread via phishing emails. it evolved to abuse compromised iot routers as part of its command-and-control infrastructure, while infected systems harvested credentials, disabled security tools, and delivered additional malware. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">October 2020<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Trickbot<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-30wvzs9, #a0d2c7);color: var(--tag-id-fg-tag-30wvzs9, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-30wvzs9\">\n\tRansomware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Trickbot was a globally dispersed banking trojan and malware distribution botnet that spread via phishing emails. It evolved to abuse compromised IoT routers as part of its command-and-control infrastructure, while infected systems harvested credentials, disabled security tools, and delivered additional malware.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2020\/10\/12\/trickbot-ransomware-cyberthreat-us-elections\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"necurs\" data-tags='[\"fraud\"]' data-search=\"necurs fraud covid-19 bonus fraud covid-19 bonus was a business email compromise campaign that used pandemic-themed lures to target victims. identified by the dcu in december 2019, it evolved to exploit covid-19-related anxieties, with phishing emails promising a &ldquo;covid-19 bonus&rdquo; to induce engagement. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">July 2020<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">COVID-19 Bonus<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">COVID-19 Bonus was a business email compromise campaign that used pandemic-themed lures to target victims. Identified by the DCU in December 2019, it evolved to exploit COVID-19-related anxieties, with phishing emails promising a &ldquo;COVID-19 Bonus&rdquo; to induce engagement.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2020\/07\/07\/digital-crimes-unit-covid-19-cybercrime\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"necurs\" data-tags='[\"malware\",\"ransomware\",\"cybercrime-tools-and-services\"]' data-search=\"necurs malware ransomware cybercrime tools and services necurs malware ransomware cybercrime tools and services necurs was one of the world&rsquo;s largest criminal botnets, used as a botnet-for-hire to distribute malware, spam, and financial scams at global scale, enabling credential theft, ransomware delivery, and other cybercrime activity. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">March 2020<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Necurs<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-30wvzs9, #a0d2c7);color: var(--tag-id-fg-tag-30wvzs9, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-30wvzs9\">\n\tRansomware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Necurs was one of the world&rsquo;s largest criminal botnets, used as a botnet-for-hire to distribute malware, spam, and financial scams at global scale, enabling credential theft, ransomware delivery, and other cybercrime activity.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2020\/03\/10\/necurs-botnet-cyber-crime-disrupt\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"emerald-sleet\" data-tags='[\"nation-state\"]' data-search=\"emerald sleet nation-state emerald sleet nation-state emerald sleet is a north korea-based cyberespionage threat actor targeting government employees, think tanks, university staff, and organizations focused on world peace, human rights, and nuclear nonproliferation&mdash;primarily in the united states, japan, and south korea. previously tracked as thallium. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">December 2019<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Emerald Sleet<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-5utjqi0, #ffe399);color: var(--tag-id-fg-tag-5utjqi0, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-5utjqi0\">\n\tnation-state<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Emerald Sleet is a North Korea-based cyberespionage threat actor targeting government employees, think tanks, university staff, and organizations focused on world peace, human rights, and nuclear nonproliferation&mdash;primarily in the United States, Japan, and South Korea. Previously tracked as Thallium.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2019\/12\/30\/microsoft-court-action-against-nation-state-cybercrime\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"mint-sandstorm\" data-tags='[\"nation-state\"]' data-search=\"mint sandstorm nation-state mint sandstorm nation-state mint sandstorm is an iran-based threat actor targeting prominent individuals in business and government through tailored phishing and social engineering to steal credentials, conduct surveillance, and support state espionage&mdash;frequently focusing on activists, journalists, and middle east policy communities. previously tracked as phosphorus. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">March 2019<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Mint Sandstorm<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-5utjqi0, #ffe399);color: var(--tag-id-fg-tag-5utjqi0, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-5utjqi0\">\n\tnation-state<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Mint Sandstorm is an Iran-based threat actor targeting prominent individuals in business and government through tailored phishing and social engineering to steal credentials, conduct surveillance, and support state espionage&mdash;frequently focusing on activists, journalists, and Middle East policy communities. Previously tracked as Phosphorus.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2019\/10\/04\/recent-cyberattacks-require-us-all-to-be-vigilant\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"gamarue\" data-tags='[\"malware\",\"cybercrime-tools-and-services\"]' data-search=\"gamarue malware cybercrime tools and services gamarue malware cybercrime tools and services gamarue, also known as andromeda, is a crimeware kit sold in hacker forums to monetize malware installs. it spread via email, social platforms, and usbs, disabled windows security controls, and enabled largescale delivery of follow-on malware. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">November 2017<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Gamarue<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Gamarue, also known as Andromeda, is a crimeware kit sold in hacker forums to monetize malware installs. It spread via email, social platforms, and USBs, disabled Windows security controls, and enabled largescale delivery of follow-on malware.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/www.europol.europa.eu\/media-press\/newsroom\/news\/andromeda-botnet-dismantled-in-international-cyber-operation\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"avalanche\" data-tags='[\"fraud\",\"malware\"]' data-search=\"avalanche fraud malware avalanche fraud malware avalanche was a criminal syndicate and botnet infrastructure used to conduct phishing, bank fraud, and ransomware at scale. it enabled malware hosting and distribution, credential and financial data theft, money-mule fraud schemes, and secondary attacks from compromised victim systems. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">November 2017<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Avalanche<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Avalanche was a criminal syndicate and botnet infrastructure used to conduct phishing, bank fraud, and ransomware at scale. It enabled malware hosting and distribution, credential and financial data theft, money-mule fraud schemes, and secondary attacks from compromised victim systems.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/www.europol.europa.eu\/media-press\/newsroom\/news\/%e2%80%98avalanche%e2%80%99-network-dismantled-in-international-cyber-operation\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"brass-typhoon\" data-tags='[\"nation-state\"]' data-search=\"brass typhoon nation-state brass typhoon nation-state brass typhoon is a china--based nation-state threat actor targeting gaming and internet content companies to steal sensitive data using custom malware with credential theft, exploitation, and exfiltration capabilities. previously tracked as barium. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">October 2017<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Brass Typhoon<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-5utjqi0, #ffe399);color: var(--tag-id-fg-tag-5utjqi0, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-5utjqi0\">\n\tnation-state<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Brass Typhoon is a China&ndash;based nation-state threat actor targeting gaming and internet content companies to steal sensitive data using custom malware with credential theft, exploitation, and exfiltration capabilities. Previously tracked as Barium.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/www.noticeofpleadings.net\/barium\/index.html\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"forest-blizzard\" data-tags='[\"nation-state\"]' data-search=\"forest blizzard nation-state forest blizzard nation-state forest blizzard is a russia-based nation-state threat actor that targets democratic institutions, governments, and ngos through cyberespionage and influence operations. it played a prominent role in election interference and escalated cyber activity at the outset of russia&rsquo;s war against ukraine. previously tracked as strontium. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">August 2016<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Forest Blizzard<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-5utjqi0, #ffe399);color: var(--tag-id-fg-tag-5utjqi0, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-5utjqi0\">\n\tnation-state<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Forest Blizzard is a Russia-based nation-state threat actor that targets democratic institutions, governments, and NGOs through cyberespionage and influence operations. It played a prominent role in election interference and escalated cyber activity at the outset of Russia&rsquo;s war against Ukraine. Previously tracked as Strontium.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2018\/08\/20\/we-are-taking-new-steps-against-broadening-threats-to-democracy\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"dorkbot\" data-tags='[\"malware\"]' data-search=\"dorkbot malware dorkbot malware dorkbot was a multicomponent malware family designed to disable security protections, steal credentials and personal data, and spread aggressively via usb drives, instant messaging, and social networks. it leveraged infected devices to distribute itself, download additional payloads, and operate as part of large botnets enabling persistent compromise. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">December 2015<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Dorkbot<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Dorkbot was a multicomponent malware family designed to disable security protections, steal credentials and personal data, and spread aggressively via USB drives, instant messaging, and social networks. It leveraged infected devices to distribute itself, download additional payloads, and operate as part of large botnets enabling persistent compromise.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2015\/12\/17\/cloud-power-disrupts-global-malware\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"simda\" data-tags='[\"malware\",\"fraud\"]' data-search=\"simda malware fraud simda malware fraud simda was a financial fraud botnet built from multiple modules that enabled banking credential theft, backdoor access, traffic manipulation, cryptocurrency mining, and delivery of additional malware. it spread via spam, exploit kits, and compromised websites, enabling persistent largescale compromise. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">April 2015<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Simda<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Simda was a financial fraud botnet built from multiple modules that enabled banking credential theft, backdoor access, traffic manipulation, cryptocurrency mining, and delivery of additional malware. It spread via spam, exploit kits, and compromised websites, enabling persistent largescale compromise.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/www.interpol.int\/News-and-Events\/News\/2015\/INTERPOL-coordinates-global-operation-to-take-down-Simda-botnet\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"ramnit\" data-tags='[\"malware\",\"fraud\"]' data-search=\"ramnit malware fraud ramnit malware fraud ramnit is a financial fraud botnet focused on stealing online banking credentials. its modular architecture enabled credential theft, web-inject attacks against banking sites, remote control of victim pcs, and disabling of security software. it spread via phishing emails and social networking platforms. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">February 2015<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Ramnit<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Ramnit is a financial fraud botnet focused on stealing online banking credentials. Its modular architecture enabled credential theft, web-inject attacks against banking sites, remote control of victim PCs, and disabling of security software. It spread via phishing emails and social networking platforms.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/eupolicy\/2015\/10\/22\/breaking-up-a-botnet-how-ramnit-was-foiled\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"caphaw\" data-tags='[\"malware\",\"fraud\"]' data-search=\"caphaw malware fraud caphaw malware fraud caphaw was a banking malware family that targeted major european financial institutions, enabling attackers to take full control of infected pcs and steal online banking credentials. it spread via social engineering on platforms like facebook, youtube, and skype, as well as removable media and drive-by downloads. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">July 2014<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Caphaw<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Caphaw was a banking malware family that targeted major European financial institutions, enabling attackers to take full control of infected PCs and steal online banking credentials. It spread via social engineering on platforms like Facebook, YouTube, and Skype, as well as removable media and drive-by downloads.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2014\/09\/29\/microsoft-partners-financial-services-industry-fight-cybercrime\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"gameover-zeus\" data-tags='[\"malware\",\"fraud\"]' data-search=\"gameover zeus malware fraud gameover zeus malware fraud gameover zeus was a banking malware and botnet spread via spam and phishing that hijacked online banking sessions to steal credentials and funds. it also delivered ransomware, combining financial fraud with extortion to maximize criminal impact. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">June 2014<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">GameOver Zeus<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">GameOver Zeus was a banking malware and botnet spread via spam and phishing that hijacked online banking sessions to steal credentials and funds. It also delivered ransomware, combining financial fraud with extortion to maximize criminal impact.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"\/\/blogs.microsoft.com\/blog\/2014\/06\/02\/microsoft-helps-fbi-in-gameover-zeus-botnet-cleanup\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"bladabindi-jenxcus\" data-tags='[\"malware\",\"fraud\",\"cybercrime-tools-and-services\"]' data-search=\"bladabindi &amp; jenxcus malware fraud cybercrime tools and services bladabindi &amp; jenxcus malware fraud cybercrime tools and services bladabindi and jenxcus were pervasive remote access malware families that enabled cybercriminals to take full control of victim pcs for fraud and data theft. widely promoted on social media with step-by-step guides, they spread via infected usb drives and other malware, exposing millions of users to abuse at global scale. also tracked as b106. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">June 2014<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Bladabindi &amp; Jenxcus<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Bladabindi and Jenxcus were pervasive remote access malware families that enabled cybercriminals to take full control of victim PCs for fraud and data theft. Widely promoted on social media with step-by-step guides, they spread via infected USB drives and other malware, exposing millions of users to abuse at global scale. Also tracked as B106.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/blog\/2014\/06\/30\/microsoft-takes-on-global-cybercrime-epidemic-in-tenth-malware-disruption\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"zeroaccess\" data-tags='[\"malware\",\"fraud\"]' data-search=\"zeroaccess malware fraud zeroaccess malware fraud zeroaccess was a multicomponent trojan and botnet designed to generate revenue through largescale pay-per-click fraud. it hijacked search results and redirected traffic to ads, driving illicit profits while exposing victims to additional malware, data theft, and broader online fraud. also tracked as sirefef. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">December 2013<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">ZeroAccess<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">ZeroAccess was a multicomponent Trojan and botnet designed to generate revenue through largescale pay-per-click fraud. It hijacked search results and redirected traffic to ads, driving illicit profits while exposing victims to additional malware, data theft, and broader online fraud. Also tracked as Sirefef.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/blog\/2013\/12\/05\/microsoft-europol-fbi-and-industry-partners-disrupt-notorious-zeroaccess-botnet-that-hijacks-search-results\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"citadel\" data-tags='[\"malware\",\"fraud\"]' data-search=\"citadel malware fraud citadel malware fraud citadel was a sophisticated banking trojan responsible for over $500m in losses, stealing credentials through keylogging and man-in-the-browser attacks. by injecting popups and monitoring web traffic on legitimate sites, it tricked victims into surrendering sensitive financial information. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">June 2013<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Citadel<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Citadel was a sophisticated banking Trojan responsible for over $500M in losses, stealing credentials through keylogging and man-in-the-browser attacks. By injecting popups and monitoring web traffic on legitimate sites, it tricked victims into surrendering sensitive financial information.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2013\/06\/21\/initial-revelations-and-results-of-the-citadel-botnet-operation\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"bamital\" data-tags='[\"malware\",\"fraud\"]' data-search=\"bamital malware fraud bamital malware fraud bamital was a click fraud and search hijacking malware that intercepted web traffic and redirected users to advertising and malicious sites to generate illicit revenue. installed largely via drive by downloads, it stripped users of control and exposed them to identity theft and additional malware infections. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">February 2013<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Bamital<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Bamital was a click fraud and search hijacking malware that intercepted web traffic and redirected users to advertising and malicious sites to generate illicit revenue. Installed largely via drive by downloads, it stripped users of control and exposed them to identity theft and additional malware infections.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/blog\/2013\/02\/06\/microsoft-and-symantec-take-down-bamital-botnet-that-hijacks-online-searches\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"nitol\" data-tags='[\"malware\",\"cybercrime-tools-and-services\"]' data-search=\"nitol malware cybercrime tools and services nitol malware cybercrime tools and services nitol was a trojan commonly bundled with corrupted peer-to-peer software that quietly conscripted infected pcs into botnets. once active, it enabled large-scale ddos attacks without user awareness, turning everyday consumer devices into infrastructure for disruptive cyberattacks. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">September 2012<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Nitol<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Nitol was a Trojan commonly bundled with corrupted peer-to-peer software that quietly conscripted infected PCs into botnets. Once active, it enabled large-scale DDoS attacks without user awareness, turning everyday consumer devices into infrastructure for disruptive cyberattacks.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/blog\/2012\/09\/13\/microsoft-disrupts-the-emerging-nitol-botnet-being-spread-through-an-unsecure-supply-chain\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"zeus\" data-tags='[\"malware\",\"fraud\"]' data-search=\"zeus malware fraud zeus malware fraud zeus was a prolific keylogging botnet that captured banking credentials by recording keystrokes and intercepting online sessions. distributed through spam and drive-by downloads, it enabled identity theft, unauthorized fund transfers, and large-scale financial fraud against unsuspecting users. also tracked as zbot. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">March 2012<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Zeus<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Zeus was a prolific keylogging botnet that captured banking credentials by recording keystrokes and intercepting online sessions. Distributed through spam and drive-by downloads, it enabled identity theft, unauthorized fund transfers, and large-scale financial fraud against unsuspecting users. Also tracked as Zbot.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/blog\/2012\/03\/25\/microsoft-and-financial-services-industry-leaders-target-cybercriminal-operations-from-zeus-botnets\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"kelihos\" data-tags='[\"malware\",\"cybercrime-tools-and-services\"]' data-search=\"kelihos malware cybercrime tools and services kelihos malware cybercrime tools and services kelihos was a highly adaptable botnet used to send massive spam campaigns, steal credentials and financial data, and download or execute additional malware. it enabled remote control of infected pcs, disabled security defenses, and installed ransomware or other payloads, making it a versatile and persistent cybercrime platform. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">September 2011<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Kelihos<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-k0jvx7t, #8dc8e8);color: var(--tag-id-fg-tag-k0jvx7t, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-k0jvx7t\">\n\tCybercrime tools and services<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Kelihos was a highly adaptable botnet used to send massive spam campaigns, steal credentials and financial data, and download or execute additional malware. It enabled remote control of infected PCs, disabled security defenses, and installed ransomware or other payloads, making it a versatile and persistent cybercrime platform.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/blog\/2012\/02\/03\/update-on-kelihos-botnet-and-new-related-malware\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"rustock\" data-tags='[\"malware\",\"fraud\"]' data-search=\"rustock malware fraud rustock malware fraud rustock was a rootkit-enabled backdoor trojan that powered one of the world&rsquo;s largest spam botnets, flooding the internet with tens of billions of emails daily. its scale showed how stealthy malware could industrialize abuse and undermine trust at global scale. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">March 2011<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Rustock<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Rustock was a rootkit-enabled backdoor Trojan that powered one of the world&rsquo;s largest spam botnets, flooding the internet with tens of billions of emails daily. Its scale showed how stealthy malware could industrialize abuse and undermine trust at global scale.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2011\/07\/05\/battling-the-rustock-threat\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"conficker\" data-tags='[\"malware\"]' data-search=\"conficker malware conficker malware conficker was a fast-moving network worm that exploited shared networks and removable media to spread at scale. once inside an environment, it enabled follow-on malware and spam distribution, turning trusted enterprise networks into engines of criminal propagation. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">February 2010<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Conficker<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Conficker was a fast-moving network worm that exploited shared networks and removable media to spread at scale. Once inside an environment, it enabled follow-on malware and spam distribution, turning trusted enterprise networks into engines of criminal propagation.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2011\/11\/22\/microsofts-digital-crimes-unit-talks-cybercrime-with-worm-author-mark-bowden\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<article class=\"wp-block-microsoft-timeline-timeline-item\" id=\"waledac\" data-tags='[\"malware\",\"fraud\"]' data-search=\"waledac malware fraud waledac malware fraud waledac was a sophisticated trojan that powered large-scale cybercrime, harvesting email addresses to fuel massive spam campaigns. it also enabled denial-of-service attacks, malware delivery, data theft, and persistent control of infected systems at scale. learn more\">\n\t\t\t<span class=\"wp-block-microsoft-timeline-timeline-item__date\">February 2010<\/span>\n\t\t\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-fpuc0d436 is-layout-flow wp-block-group-is-layout-flow\" style=\"margin-top:6px;margin-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"fpuc0d436\"><h2 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:20px;font-size:clamp(24.034px, 1.502rem + ((1vw - 3.9px) * 1.506), 40px)\">Waledac<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-mf2qc8ko9 is-layout-flex wp-container-core-group-is-layout-e92f02ca wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"mf2qc8ko9\"><span style=\"background-color: var(--tag-id-bg-tag-3gf5rgd, #ffa38b);color: var(--tag-id-fg-tag-3gf5rgd, var(--tag-fg-fallback))\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-3gf5rgd\">\n\tMalware<\/span>\n\n\n<span style=\"background-color: var(--tag-id-bg-tag-duhcisk, #b9dcd2);color: var(--tag-id-fg-tag-duhcisk, #000)\" class=\"wp-block-microsoft-timeline-timeline-tag\" data-tag-id=\"tag-duhcisk\">\n\tFraud<\/span>\n<\/div>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Waledac was a sophisticated Trojan that powered large-scale cybercrime, harvesting email addresses to fuel massive spam campaigns. It also enabled denial-of-service attacks, malware delivery, data theft, and persistent control of infected systems at scale.<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\" style=\"margin-top:40px\"><div class=\"wp-block-button is-style-text\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/blogs.microsoft.com\/blog\/2010\/02\/24\/cracking-down-on-botnets\/\" style=\"font-style:normal;font-weight:600\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Learn More\">Learn More <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n<\/article>\n\n\n<div class=\"timeline-nav-buttons is-sticky wp-block-microsoft-timeline-timeline-nav-buttons\" data-mode=\"single\">\n\t<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n\t\t<div class=\"wp-block-button is-style-outline timeline-nav-buttons__button timeline-nav-buttons__button--next\"><button type=\"button\" class=\"wp-block-button__link wp-element-button\" aria-label=\"Next event\"><svg width=\"14\" height=\"19\" viewbox=\"0 0 14 19\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M2.75691 17.6776L11.2422 9.19231L2.75691 0.707031\" fill=\"currentColor\"><\/path><\/svg><\/button><\/div><div class=\"wp-block-button is-style-outline timeline-nav-buttons__button timeline-nav-buttons__button--prev\" aria-hidden=\"true\"><button type=\"button\" class=\"wp-block-button__link wp-element-button\" aria-label=\"Previous event\"><svg width=\"14\" height=\"19\" viewbox=\"0 0 14 19\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M11.2426 0.707173L2.75732 9.19245L11.2426 17.6777\" fill=\"currentColor\"><\/path><\/svg><\/button><\/div>\t<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\t<a href=\"#timeline-skip-2-filters\" class=\"wp-element-button wp-block-microsoft-timeline-timeline__skip-link\" data-bi-cn=\"Back to filters\">\n\t\tBack to filters\t<\/a>\n\t<a href=\"#timeline-skip-2-start\" class=\"wp-element-button wp-block-microsoft-timeline-timeline__skip-link\" data-bi-cn=\"Back to start of timeline\">\n\t\tBack to start of timeline\t<\/a>\n\t<span id=\"timeline-skip-2-end\" tabindex=\"-1\"><\/span>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignfull has-clear-blue-color has-deep-blue-background-color has-text-color has-background has-link-color microsoft-breakpoint-id-wmdfkgjku wp-elements-2e274b10d5c6d8623d86f1db22c75f08 has-global-padding is-layout-constrained wp-block-group-is-layout-constrained block-visibility-hide-small-screen\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"wmdfkgjku\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-6dpqfpurj layout-ruled-split-intro-alt is-layout-grid wp-container-core-group-is-layout-5a23bf8e wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"6dpqfpurj\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-km0cvquub has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"km0cvquub\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2208u8rkf is-nowrap is-layout-flex wp-container-core-group-is-layout-fa7aa1b1 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--sm);cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/DCU-law-fighting-cybercrime\/\" data-clickable-context=\"custom\" data-clickable-selector=\"\" data-microsoft-breakpoint-id=\"2208u8rkf\"><h2 class=\"wp-block-heading has-body-2-xl-plus-fluid-font-size\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/DCU-law-fighting-cybercrime\/\" data-bi-cn=\"Helping the law move &#8232;at the speed of cybercrime\">Helping the law move &#8232;at the speed of cybercrime<\/a><\/h2>\n\n\n<svg class=\"wp-block-tenup-icon reacts-on-clickable-hover\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);width: 40px;height: 40px\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg>\n<\/div>\n\n\n<div class=\"wp-block-columns is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-ccff4001 wp-block-columns-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md)\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:15%\"><figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/celacampaindev.wpenginepowered.com\/wp-content\/uploads\/2025\/12\/quote.png\" alt=\"\" class=\"wp-image-2584\" style=\"aspect-ratio:1;object-fit:cover;width:50px\"><\/figure>\n<\/div>\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\"><p class=\"has-segoe-serif-font-family has-body-xl-fluid-font-size wp-block-paragraph\" style=\"margin-top:0;padding-top:0\">Nation-state actors are much more sophisticated&#8232;and difficult to identify. They want to blend into traffic, and there are very few victims.&#8232;We had to devise new investigative techniques,&#8232;as well as adapt our legal techniques.<\/p>\n\n\n<p class=\"has-segoe-sans-font-family has-body-large-fluid-font-size wp-block-paragraph\" style=\"margin-bottom:0;padding-bottom:0;font-style:normal;font-weight:600\">Richard Boscovich<\/p>\n\n\n<p class=\"has-body-sm-font-size wp-block-paragraph\" style=\"margin-top:0;margin-bottom:0;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--2-xs)\">Assistant General Counsel, Microsoft Digital Crimes Unit on the DCU&rsquo;s unique approach to disrupting malware threats<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/DCU-law-fighting-cybercrime\/\" data-bi-cn=\"Richard Boscovich, assistant general counsel, DCU, in conversation during a meeting.\"><img decoding=\"async\" src=\"https:\/\/celacampaindev.wpenginepowered.com\/wp-content\/uploads\/2025\/12\/image-56-1.png\" alt=\"Richard Boscovich, assistant general counsel, DCU, in conversation during a meeting.\" class=\"wp-image-2542\" style=\"aspect-ratio:1;object-fit:cover\"><\/a><\/figure>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignfull has-clear-blue-color has-deep-blue-background-color has-text-color has-background has-link-color microsoft-breakpoint-id-wmdfkgjku wp-elements-4d90f4d8dc9739daa8b35ac3a40d2044 is-layout-flow wp-block-group-is-layout-flow block-visibility-hide-large-screen block-visibility-hide-medium-screen\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"wmdfkgjku\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-4ctd6xcof has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"4ctd6xcof\"><figure class=\"wp-block-image aligncenter size-full is-resized\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/DCU-law-fighting-cybercrime\/\" data-bi-cn=\"image-56-1\"><img decoding=\"async\" src=\"https:\/\/celacampaindev.wpenginepowered.com\/wp-content\/uploads\/2025\/12\/image-56-1.png\" alt=\"\" class=\"wp-image-2542\" style=\"width:486px\"><\/a><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-hse28qqy4 is-nowrap is-layout-flex wp-container-core-group-is-layout-07d954ff wp-block-group-is-layout-flex\" style=\"padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--sm);cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/DCU-law-fighting-cybercrime\/\" data-clickable-context=\"custom\" data-clickable-selector=\"\" data-microsoft-breakpoint-id=\"hse28qqy4\"><h2 class=\"wp-block-heading\" style=\"font-size:clamp(27.894px, 1.743rem + ((1vw - 3.9px) * 1.897), 48px);line-height:1.3\"><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/DCU-law-fighting-cybercrime\/\" data-bi-cn=\"Helping the law move&#8232; at the speed of cybercrime\">Helping the law move&#8232; at the speed of cybercrime<\/a><\/h2>\n\n\n<svg class=\"wp-block-tenup-icon reacts-on-clickable-hover\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);width: 40px;height: 40px\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg>\n<\/div>\n\n\n<div class=\"wp-block-columns is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-ccff4001 wp-block-columns-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md)\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:15%\"><figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/celacampaindev.wpenginepowered.com\/wp-content\/uploads\/2025\/12\/quote.png\" alt=\"\" class=\"wp-image-2584\" style=\"aspect-ratio:1;object-fit:cover;width:50px\"><\/figure>\n<\/div>\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\"><p class=\"has-segoe-serif-font-family has-body-xl-fluid-font-size wp-block-paragraph\" style=\"margin-top:0;padding-top:0\">Nation-state actors are much more sophisticated&#8232;and difficult to identify. They want to blend into traffic, and there are very few victims.&#8232;We had to devise new investigative techniques,&#8232;as well as adapt our legal techniques.<\/p>\n\n\n<p class=\"has-segoe-sans-font-family has-body-large-fluid-font-size wp-block-paragraph\" style=\"margin-bottom:0;padding-bottom:0;font-style:normal;font-weight:600\">Richard Boscovich<\/p>\n\n\n<p class=\"has-body-sm-font-size wp-block-paragraph\" style=\"margin-top:0;margin-bottom:0;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--2-xs)\">Assistant General Counsel, Microsoft Digital Crimes Unit on the DCU&rsquo;s unique approach to disrupting malware threats<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull microsoft-breakpoint-id-0sqm00sgd has-global-padding is-layout-constrained wp-block-group-is-layout-constrained block-visibility-hide-small-screen\" style=\"margin-top:0;margin-bottom:0;padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid);cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/09\/18\/made-in-wisconsin-the-worlds-most-powerful-ai-datacenter\/\" data-clickable-context=\"selector\" data-clickable-selector=\".wp-block-heading a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"0sqm00sgd\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-bsnt0zilg layout-ruled-split-intro is-layout-grid wp-container-core-group-is-layout-5bf3a4ef wp-block-group-is-layout-grid\" style=\"border-top-color:var(--wp--preset--color--deep-dark-teal);border-top-width:2px\" data-microsoft-breakpoint-id=\"bsnt0zilg\"><figure class=\"wp-block-image size-full is-resized flex-no-shrink wp-container-content-e1688eaf\"><img loading=\"lazy\" decoding=\"async\" width=\"972\" height=\"962\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-2.png.webp\" alt=\"\" class=\"wp-image-4418\" style=\"aspect-ratio:1;object-fit:cover;width:475px\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-2.png.webp 972w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-2.png-300x297.webp 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-2.png-768x760.webp 768w\" sizes=\"auto, (max-width: 972px) 100vw, 972px\"><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-74k1dxheu wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-0a653cad wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"74k1dxheu\"><h2 class=\"wp-block-heading has-body-2-xl-plus-fluid-font-size\"><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/09\/18\/made-in-wisconsin-the-worlds-most-powerful-ai-datacenter\/\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"blogs.microsoft.com\"><\/a><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/cpi-protecting-ngos\/\" data-bi-cn=\"The institute helping&#8232; NGOs defend themselves\">The institute helping&#8232; NGOs defend themselves<\/a><\/h2>\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-a948d68f wp-block-columns-is-layout-flex\" style=\"margin-bottom:0\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50%\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2fbj6hq3x is-vertical is-layout-flex wp-container-core-group-is-layout-c41a1661 wp-block-group-is-layout-flex\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:1px;min-height:100%;padding-bottom:0\" data-microsoft-breakpoint-id=\"2fbj6hq3x\"><h3 class=\"wp-block-heading has-brown-black-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-d537c64ff9cc203237ed27dbc17b220c\" style=\"border-bottom-style:none;border-bottom-width:0px;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--sm)\">300,000 computers<\/h3>\n\n\n<p class=\"has-brown-black-color has-text-color has-link-color wp-elements-d05ff1661a90e6a20b50ca10aefb5cf8 wp-block-paragraph\">In May 2017, a ransomware attack hit 300,000 computers in 150 countries in six hours<\/p>\n<\/div>\n<\/div>\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50%\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2fbj6hq3x is-vertical is-layout-flex wp-container-core-group-is-layout-d75de7b4 wp-block-group-is-layout-flex\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:1px;min-height:100%\" data-microsoft-breakpoint-id=\"2fbj6hq3x\"><h3 class=\"wp-block-heading has-brown-black-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-51cff3e9c6c88a71358a4b3277a3c3cb\" style=\"border-bottom-style:none;border-bottom-width:0px;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--sm)\">155,993 cyberattacks<\/h3>\n\n\n<p class=\"has-brown-black-color has-text-color has-link-color wp-elements-66e0eb78ad2c55dba326015d3850ce63 wp-block-paragraph\">The CyberPeace Institute identified 155,993 cyberattacks against nonprofits<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull microsoft-breakpoint-id-rr60cprft has-global-padding is-layout-constrained wp-container-core-group-is-layout-ee2332cf wp-block-group-is-layout-constrained block-visibility-hide-large-screen\" style=\"cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\".wp-block-heading a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"rr60cprft\"><figure class=\"wp-block-image alignfull size-full has-custom-border\"><img loading=\"lazy\" decoding=\"async\" width=\"972\" height=\"962\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-2.png.webp\" alt=\"\" class=\"wp-image-4418\" style=\"border-top-color:var(--wp--preset--color--deep-dark-teal);border-top-width:2px\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-2.png.webp 972w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-2.png-300x297.webp 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-2.png-768x760.webp 768w\" sizes=\"auto, (max-width: 972px) 100vw, 972px\"><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-gbsi3kq5z is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-28bc36d9 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"gbsi3kq5z\"><h2 class=\"wp-block-heading alignwide has-body-2-xl-fluid-font-size\"><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/09\/18\/made-in-wisconsin-the-worlds-most-powerful-ai-datacenter\/\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"blogs.microsoft.com\"><\/a><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/cpi-protecting-ngos\/\" data-bi-cn=\"The institute helping&#8232; NGOs defend themselves\">The institute helping&#8232; NGOs defend themselves<\/a><\/h2>\n\n\n<div class=\"wp-block-columns alignwide is-layout-flex wp-container-core-columns-is-layout-a948d68f wp-block-columns-is-layout-flex\" style=\"margin-bottom:0\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50%\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2fbj6hq3x is-vertical is-layout-flex wp-container-core-group-is-layout-c41a1661 wp-block-group-is-layout-flex\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:1px;min-height:100%;padding-bottom:0\" data-microsoft-breakpoint-id=\"2fbj6hq3x\"><h3 class=\"wp-block-heading has-brown-black-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-d537c64ff9cc203237ed27dbc17b220c\" style=\"border-bottom-style:none;border-bottom-width:0px;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--sm)\">300,000 computers<\/h3>\n\n\n<p class=\"has-brown-black-color has-text-color has-link-color wp-elements-ead5e837751a061bba5d414393eb8d6b wp-block-paragraph\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.9px) * 0.189), 16px);\">In May 2017, a ransomware attack hit 300,000 computers in 150 countries in six hours<\/p>\n<\/div>\n<\/div>\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50%\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2fbj6hq3x is-vertical is-layout-flex wp-container-core-group-is-layout-d75de7b4 wp-block-group-is-layout-flex\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:1px;min-height:100%\" data-microsoft-breakpoint-id=\"2fbj6hq3x\"><h3 class=\"wp-block-heading has-brown-black-color has-text-color has-link-color has-body-large-fluid-font-size wp-elements-c32c6f64c700404446cb135ac0490785\" style=\"border-bottom-style:none;border-bottom-width:0px;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--sm)\">155,993 cyberattacks<\/h3>\n\n\n<p class=\"has-brown-black-color has-text-color has-link-color wp-elements-35787b41524f2a2793dea86dabf6433a wp-block-paragraph\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.9px) * 0.189), 16px);\">The CyberPeace Institute identified 155,993 cyberattacks against nonprofits<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignfull has-brown-black-color has-light-blue-background-color has-text-color has-background has-link-color microsoft-breakpoint-id-wmdfkgjku wp-elements-2c5885c85fc712bb3b2d439a59a87355 has-global-padding is-layout-constrained wp-block-group-is-layout-constrained block-visibility-hide-small-screen\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"wmdfkgjku\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-6dpqfpurj layout-ruled-split-intro-alt is-layout-grid wp-container-core-group-is-layout-5a23bf8e wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"6dpqfpurj\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-km0cvquub has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"km0cvquub\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2208u8rkf is-nowrap is-layout-flex wp-container-core-group-is-layout-fa7aa1b1 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--sm);cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/DCU-law-fighting-cybercrime\/\" data-clickable-context=\"custom\" data-clickable-selector=\"\" data-microsoft-breakpoint-id=\"2208u8rkf\"><h2 class=\"wp-block-heading has-body-2-xl-plus-fluid-font-size\"><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2024\/10\/03\/protecting-democratic-institutions-from-cyber-threats\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-bi-cn=\"blogs.microsoft.com\"><\/a><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2024\/10\/03\/protecting-democratic-institutions-from-cyber-threats\/\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Protecting democratic institutions from cyber threats\">Protecting democratic institutions from cyber threats<\/a><\/h2>\n\n\n<svg class=\"wp-block-tenup-icon reacts-on-clickable-hover\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);width: 40px;height: 40px\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg>\n<\/div>\n\n\n<div class=\"wp-block-columns is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-ccff4001 wp-block-columns-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md)\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:15%\"><figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/celacampaindev.wpenginepowered.com\/wp-content\/uploads\/2025\/12\/quote.png\" alt=\"\" class=\"wp-image-2584\" style=\"aspect-ratio:1;object-fit:cover;width:50px\"><\/figure>\n<\/div>\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\"><p class=\"has-segoe-serif-font-family has-body-xl-fluid-font-size wp-block-paragraph\" style=\"margin-top:0;padding-top:0\">Star Blizzard&rsquo;s activities underscore the importance of upholding international norms to govern responsible state behavior online. Today&rsquo;s action is an example of the impact we can have against cybercrime when we work together.<\/p>\n\n\n<p class=\"has-segoe-sans-font-family has-body-large-fluid-font-size wp-block-paragraph\" style=\"margin-bottom:0;padding-bottom:0;font-style:normal;font-weight:600\">Steven Masada<\/p>\n\n\n<p class=\"has-body-sm-font-size wp-block-paragraph\" style=\"margin-top:0;margin-bottom:0;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--2-xs)\">Assistant General Counsel, Microsoft Digital Crimes Unit on the DCU&rsquo;s unique approach to disrupting malware threats<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"972\" height=\"962\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-1.png\" alt=\"\" class=\"wp-image-4420\" style=\"aspect-ratio:1;object-fit:cover\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-1.png 972w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-1-300x297.png 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-1-768x760.png 768w\" sizes=\"auto, (max-width: 972px) 100vw, 972px\"><\/figure>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignfull has-brown-black-color has-light-blue-background-color has-text-color has-background has-link-color microsoft-breakpoint-id-wmdfkgjku wp-elements-eaea38ffe5a44476c3ce394d11affac5 is-layout-flow wp-block-group-is-layout-flow block-visibility-hide-large-screen block-visibility-hide-medium-screen\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"wmdfkgjku\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-4ctd6xcof has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"4ctd6xcof\"><figure class=\"wp-block-image aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"972\" height=\"962\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-1.png\" alt=\"\" class=\"wp-image-4420\" style=\"width:486px\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-1.png 972w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-1-300x297.png 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-1-768x760.png 768w\" sizes=\"auto, (max-width: 972px) 100vw, 972px\"><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-hse28qqy4 is-nowrap is-layout-flex wp-container-core-group-is-layout-07d954ff wp-block-group-is-layout-flex\" style=\"padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--sm);cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/stories\/DCU-law-fighting-cybercrime\/\" data-clickable-context=\"custom\" data-clickable-selector=\"\" data-microsoft-breakpoint-id=\"hse28qqy4\"><h2 class=\"wp-block-heading\" style=\"font-size:clamp(27.894px, 1.743rem + ((1vw - 3.9px) * 1.897), 48px);line-height:1.3\"><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2024\/10\/03\/protecting-democratic-institutions-from-cyber-threats\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-bi-cn=\"Protecting democratic institutions from cyber threats\">Protecting democratic institutions from cyber threats<\/a><\/h2>\n\n\n<svg class=\"wp-block-tenup-icon reacts-on-clickable-hover\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);width: 40px;height: 40px\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg>\n<\/div>\n\n\n<div class=\"wp-block-columns is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-ccff4001 wp-block-columns-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md)\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:15%\"><figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/celacampaindev.wpenginepowered.com\/wp-content\/uploads\/2025\/12\/quote.png\" alt=\"\" class=\"wp-image-2584\" style=\"aspect-ratio:1;object-fit:cover;width:50px\"><\/figure>\n<\/div>\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\"><p class=\"has-segoe-serif-font-family has-body-xl-fluid-font-size wp-block-paragraph\" style=\"margin-top:0;padding-top:0\">Star Blizzard&rsquo;s activities underscore the importance of upholding international norms to govern responsible state behavior online. Today&rsquo;s action is an example of the impact we can have against cybercrime when we work together.<\/p>\n\n\n<p class=\"has-segoe-sans-font-family has-body-large-fluid-font-size wp-block-paragraph\" style=\"margin-bottom:0;padding-bottom:0;font-style:normal;font-weight:600\">Steven Masada<\/p>\n\n\n<p class=\"has-body-sm-font-size wp-block-paragraph\" style=\"margin-top:0;margin-bottom:0;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--2-xs)\">Assistant General Counsel, Microsoft Digital Crimes Unit on the DCU&rsquo;s unique approach to disrupting malware threats<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<figure class=\"microsoft-embed-block alignfull wp-block-microsoft-embed-embed is-layout-flow wp-block-microsoft-embed-embed-is-layout-flow\" id=\"microsoft-embed-5\" data-auto-resize-height=\"false\" data-controls=\"\">\n\t\t<div class=\"wp-block-embed__wrapper\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"microsoft-embed-block__overlay is-position-bottom-center\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"microsoft-embed-block__inner-container is-layout-constrained wp-block-microsoft-embed-embed-is-layout-constrained wp-container-microsoft-embed-is-layout-4\">\n\t\t\t\t\t\t<div data-bi-ct=\"group\" class=\"wp-block-group alignfull has-white-color has-microsoft-midnight-alt-gradient-background has-text-color has-background has-link-color microsoft-breakpoint-id-kjuy3sa4f has-global-padding is-layout-constrained wp-block-group-is-layout-constrained block-visibility-hide-small-screen\" data-microsoft-breakpoint-id=\"kjuy3sa4f\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-dzwhqmzru is-content-justification-space-between is-nowrap is-layout-flex wp-container-core-group-is-layout-90560c6f wp-block-group-is-layout-flex\" style=\"border-top-color:var(--wp--preset--color--white);border-top-width:2px;padding-top:var(--wp--preset--spacing--xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"dzwhqmzru\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-sryx0tyl6 is-layout-flow wp-block-group-is-layout-flow block-visibility-hide-small-screen\" data-microsoft-breakpoint-id=\"sryx0tyl6\"><h2 class=\"wp-block-heading has-body-3-xl-fluid-font-size block-visibility-hide-small-screen\">Inside the high-security facility tackling digital threats<\/h2>\n<\/div>\n\n\n<button type=\"button\" class=\"wp-block-microsoft-embed-play-button\" aria-label=\"Watch video\" data-embed-play-trigger=\"\" data-video-type=\"ump\" data-player-id=\"ump-6a7deff94bbab\">\n\t<svg class=\"wp-block-microsoft-embed-play-button__icon wp-block-microsoft-embed-play-button__icon--play\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" fill=\"none\" viewbox=\"0 0 24 24\">\n\t\t<path fill=\"currentColor\" d=\"M20.563 11.57 6 24.19V-.08zM8 19.81l9.438-8.18L8 4.082z\"><\/path>\n\t<\/svg>\n\t<svg class=\"wp-block-microsoft-embed-play-button__icon wp-block-microsoft-embed-play-button__icon--pause\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" fill=\"none\" viewbox=\"0 0 24 24\">\n\t\t<path fill=\"currentColor\" d=\"M8 5h3v14H8zM13 5h3v14h-3z\"><\/path>\n\t<\/svg>\n<\/button>\n<\/div>\n<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t<universal-media-player id=\"ump-6a7deff94bbab\"><\/universal-media-player>\n\t\t\t<script type=\"module\">\n\t\t\t\tconst currentTheme =\n\t\t\t\t\tlocalStorage.getItem('blogInABoxCurrentTheme') ||\n\t\t\t\t\t(window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light');\n\n\t\t\t\t\/\/ Merge player theme into options.\n\t\t\t\tconst options = Object.assign(\n\t\t\t\t\t{\"autoplay\":true,\"hideControls\":null,\"language\":\"en-us\",\"loop\":false,\"partnerName\":\"cloud-blogs\",\"poster\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/videoplayer\\\/embed?mp4=HQ,https:\\\/\\\/cdn-dynmedia-1.microsoft.com\\\/is\\\/image\\\/microsoftcorp\\\/T-and-W-S4-AI-Diffusion-Report-FullEpisode_video_en-us&#038;hls=https:\\\/\\\/cdn-dynmedia-1.microsoft.com\\\/is\\\/content\\\/microsoftcorp\\\/T-and-W-S4-AI-Diffusion-Report-FullEpisode_video_en-us-AVS.m3u8?packagedStreaming=true&#038;ttml=en-us,https:\\\/\\\/cdn-dynmedia-1.microsoft.com\\\/is\\\/content\\\/microsoftcorp\\\/T-and-W-S4-AI-Diffusion-Report-FullEpisode_cc_en-us&#038;transcript=en-us,https:\\\/\\\/cdn-dynmedia-1.microsoft.com\\\/is\\\/content\\\/microsoftcorp\\\/T-and-W-S4-AI-Diffusion-Report-FullEpisode_transcript_en-us_tbmnl_en-us?wid=1280\",\"title\":\"Microsoft AI Diffusion Report: How AI is being adapted worldwide\",\"sources\":[{\"src\":\"https:\\\/\\\/cdn-dynmedia-1.microsoft.com\\\/is\\\/content\\\/microsoftcorp\\\/DCU_video_en-us-0x1080-6439k\",\"type\":\"video\\\/mp4\",\"quality\":\"HQ\"},{\"src\":\"https:\\\/\\\/cdn-dynmedia-1.microsoft.com\\\/is\\\/content\\\/microsoftcorp\\\/DCU_video_en-us-0x720-3266k\",\"type\":\"video\\\/mp4\",\"quality\":\"HD\"},{\"src\":\"https:\\\/\\\/cdn-dynmedia-1.microsoft.com\\\/is\\\/content\\\/microsoftcorp\\\/DCU_video_en-us-0x540-2160k\",\"type\":\"video\\\/mp4\",\"quality\":\"SD\"},{\"src\":\"https:\\\/\\\/cdn-dynmedia-1.microsoft.com\\\/is\\\/content\\\/microsoftcorp\\\/DCU_video_en-us-0x360-958k\",\"type\":\"video\\\/mp4\",\"quality\":\"LO\"}]},\n\t\t\t\t\tcurrentTheme ? { playButtonTheme: currentTheme } : {}\n\t\t\t\t);\n\n\t\t\t\t\/\/ DOMContentLoaded fires after ALL deferred\/module scripts (including\n\t\t\t\t\/\/ ump.mjs) have executed, so ump() is guaranteed to be defined here.\n\t\t\t\tdocument.addEventListener('DOMContentLoaded', () => {\n\t\t\t\t\tump(\"ump-6a7deff94bbab\", options);\n\t\t\t\t});\n\t\t\t<\/script>\n\t\t<\/div>\n\t\t\t<\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignfull has-white-color has-deep-blue-background-color has-text-color has-background has-link-color microsoft-breakpoint-id-dzwhqmzru wp-elements-254232d32362c7e1ecea388d6f2c3caf is-content-justification-space-between is-nowrap is-layout-flex wp-container-core-group-is-layout-19811019 wp-block-group-is-layout-flex block-visibility-hide-large-screen block-visibility-hide-medium-screen\" style=\"border-top-color:var(--wp--preset--color--white);border-top-width:2px;padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-right:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--2-xl-fluid);padding-left:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"dzwhqmzru\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-sryx0tyl6 is-layout-flow wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"sryx0tyl6\"><h2 class=\"wp-block-heading has-body-3-xl-fluid-font-size\">Inside the high-security facility tackling digital threats<\/h2>\n<\/div>\n\n\n<\/div>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-clear-blue-fade-gradient-background has-background microsoft-breakpoint-id-0sqm00sgd has-global-padding is-layout-constrained wp-block-group-is-layout-constrained block-visibility-hide-small-screen\" style=\"margin-top:0;margin-bottom:0;padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid);cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/09\/18\/made-in-wisconsin-the-worlds-most-powerful-ai-datacenter\/\" data-clickable-context=\"selector\" data-clickable-selector=\".wp-block-heading a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"0sqm00sgd\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-bsnt0zilg layout-ruled-split-intro is-layout-grid wp-container-core-group-is-layout-5bf3a4ef wp-block-group-is-layout-grid\" style=\"border-top-color:var(--wp--preset--color--deep-dark-teal);border-top-width:2px\" data-microsoft-breakpoint-id=\"bsnt0zilg\"><figure class=\"wp-block-image size-full is-resized flex-no-shrink wp-container-content-e1688eaf\"><img loading=\"lazy\" decoding=\"async\" width=\"972\" height=\"962\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-3.png\" alt=\"\" class=\"wp-image-4437\" style=\"aspect-ratio:1;object-fit:cover;width:475px\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-3.png 972w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-3-300x297.png 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-3-768x760.png 768w\" sizes=\"auto, (max-width: 972px) 100vw, 972px\"><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-74k1dxheu wp-container-content-9cfa9a5a is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-0a653cad wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"74k1dxheu\"><h2 class=\"wp-block-heading has-body-2-xl-plus-fluid-font-size\"><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/09\/18\/made-in-wisconsin-the-worlds-most-powerful-ai-datacenter\/\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"blogs.microsoft.com\"><\/a><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/cybersecurity\/microsoft-digital-defense-report-2025\/\" data-bi-cn=\"research.codeghost.online\"><\/a><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/cybersecurity\/microsoft-digital-defense-report-2025\/\" data-bi-cn=\"Microsoft Digital Defense Report 2025\">Microsoft Digital Defense Report 2025<\/a><\/h2>\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-a948d68f wp-block-columns-is-layout-flex\" style=\"margin-bottom:0\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50%\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2fbj6hq3x is-vertical is-layout-flex wp-container-core-group-is-layout-c41a1661 wp-block-group-is-layout-flex\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:1px;min-height:100%;padding-bottom:0\" data-microsoft-breakpoint-id=\"2fbj6hq3x\"><h3 class=\"wp-block-heading has-brown-black-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-9f494fbf99d0ed217cee4e8ee3edd721\" style=\"border-bottom-style:none;border-bottom-width:0px;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--sm)\">100 trillion security signals<\/h3>\n\n\n<p class=\"has-brown-black-color has-text-color has-link-color wp-elements-866f6881c732118b34be5d5433588efd wp-block-paragraph\">Microsoft processes 100 trillion security signals daily, providing unparalleled insight into global cyber threats and helping organizations defend against increasingly sophisticated attacks<\/p>\n<\/div>\n<\/div>\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50%\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2fbj6hq3x is-vertical is-layout-flex wp-container-core-group-is-layout-d75de7b4 wp-block-group-is-layout-flex\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:1px;min-height:100%\" data-microsoft-breakpoint-id=\"2fbj6hq3x\"><h3 class=\"wp-block-heading has-brown-black-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-de415f38f3961c8820006091774651a9\" style=\"border-bottom-style:none;border-bottom-width:0px;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--sm)\">5 billion emails<\/h3>\n\n\n<p class=\"has-brown-black-color has-text-color has-link-color wp-elements-e84d9491c00e762fb889c0a09cd09a8a wp-block-paragraph\">5 billion emails screened daily on average to protect users from malware and phishing<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull microsoft-breakpoint-id-rr60cprft has-global-padding is-layout-constrained wp-container-core-group-is-layout-ee2332cf wp-block-group-is-layout-constrained block-visibility-hide-large-screen\" style=\"cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"\" data-clickable-context=\"selector\" data-clickable-selector=\".wp-block-heading a\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"rr60cprft\"><figure class=\"wp-block-image alignfull size-full has-custom-border\"><img loading=\"lazy\" decoding=\"async\" width=\"972\" height=\"962\" src=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-3.png\" alt=\"\" class=\"wp-image-4437\" style=\"border-top-color:var(--wp--preset--color--deep-dark-teal);border-top-width:2px\" srcset=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-3.png 972w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-3-300x297.png 300w, https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/08\/image-56-3-768x760.png 768w\" sizes=\"auto, (max-width: 972px) 100vw, 972px\"><\/figure>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignwide has-clear-blue-fade-gradient-background has-background microsoft-breakpoint-id-gbsi3kq5z is-vertical is-content-justification-stretch is-layout-flex wp-container-core-group-is-layout-28bc36d9 wp-block-group-is-layout-flex\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"gbsi3kq5z\"><h2 class=\"wp-block-heading alignwide has-body-2-xl-fluid-font-size\"><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/09\/18\/made-in-wisconsin-the-worlds-most-powerful-ai-datacenter\/\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"blogs.microsoft.com\"><\/a><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/cybersecurity\/microsoft-digital-defense-report-2025\/\" data-bi-cn=\"research.codeghost.online\"><\/a><a href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/cybersecurity\/microsoft-digital-defense-report-2025\/\" data-bi-cn=\"Microsoft Digital Defense Report 2025\">Microsoft Digital Defense Report 2025<\/a><\/h2>\n\n\n<div class=\"wp-block-columns alignwide is-layout-flex wp-container-core-columns-is-layout-a948d68f wp-block-columns-is-layout-flex\" style=\"margin-bottom:0\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50%\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2fbj6hq3x is-vertical is-layout-flex wp-container-core-group-is-layout-c41a1661 wp-block-group-is-layout-flex\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:1px;min-height:100%;padding-bottom:0\" data-microsoft-breakpoint-id=\"2fbj6hq3x\"><h3 class=\"wp-block-heading has-brown-black-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-9f494fbf99d0ed217cee4e8ee3edd721\" style=\"border-bottom-style:none;border-bottom-width:0px;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--sm)\">100 trillion security signals<\/h3>\n\n\n<p class=\"has-brown-black-color has-text-color has-link-color wp-elements-028e2b7dfeca296468e6630a4620e001 wp-block-paragraph\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.9px) * 0.189), 16px);\">Microsoft processes 100 trillion security signals daily, providing unparalleled insight into global cyber threats and helping organizations defend against increasingly sophisticated attacks<\/p>\n<\/div>\n<\/div>\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50%\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2fbj6hq3x is-vertical is-layout-flex wp-container-core-group-is-layout-d75de7b4 wp-block-group-is-layout-flex\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:1px;min-height:100%\" data-microsoft-breakpoint-id=\"2fbj6hq3x\"><h3 class=\"wp-block-heading has-brown-black-color has-text-color has-link-color has-body-large-fluid-font-size wp-elements-5f2823fa37fa29ede8958573e18d0c07\" style=\"border-bottom-style:none;border-bottom-width:0px;padding-top:var(--wp--preset--spacing--2-xs);padding-bottom:var(--wp--preset--spacing--sm)\">5 billion emails<\/h3>\n\n\n<p class=\"has-brown-black-color has-text-color has-link-color wp-elements-c96a16959858cda2bfb22779b4613044 wp-block-paragraph\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.9px) * 0.189), 16px);\">5 billion emails screened daily on average to protect users from malware and phishing<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-white-color has-brown-black-background-color has-text-color has-background has-link-color microsoft-breakpoint-id-b5cchxoa6 wp-elements-96586d460913b219778618280ddc31e2 has-global-padding is-layout-constrained wp-block-group-is-layout-constrained wp-block-block\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs)\" data-microsoft-breakpoint-id=\"b5cchxoa6\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-aavd7ooad is-content-justification-space-between is-nowrap is-layout-flex wp-container-core-group-is-layout-f36ac205 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"aavd7ooad\"><p class=\"wp-block-paragraph\">Follow us<\/p>\n\n\n<ul class=\"wp-block-social-links has-normal-icon-size has-icon-color is-style-logos-only is-layout-flex wp-container-core-social-links-is-layout-b05b44e1 wp-block-social-links-is-layout-flex\"><li style=\"color:#fff\" class=\"wp-social-link wp-social-link-linkedin has-white-color wp-block-social-link\"><a data-bi-an=\"social media\" data-bi-ct=\"socialshare\" data-bi-ecn=\"Follow LinkedIn\" data-bi-ehn=\"Rail Menu\" data-bi-hn=\"Rail Menu\" data-bi-socchn=\"LinkedIn\" rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/www.linkedin.com\/showcase\/microsoft-on-the-issues\" class=\"wp-block-social-link-anchor\" data-bi-cn=\"Follow LinkedIn\"><svg width=\"24\" height=\"24\" viewbox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M19.7,3H4.3C3.582,3,3,3.582,3,4.3v15.4C3,20.418,3.582,21,4.3,21h15.4c0.718,0,1.3-0.582,1.3-1.3V4.3 C21,3.582,20.418,3,19.7,3z M8.339,18.338H5.667v-8.59h2.672V18.338z M7.004,8.574c-0.857,0-1.549-0.694-1.549-1.548 c0-0.855,0.691-1.548,1.549-1.548c0.854,0,1.547,0.694,1.547,1.548C8.551,7.881,7.858,8.574,7.004,8.574z M18.339,18.338h-2.669 v-4.177c0-0.996-0.017-2.278-1.387-2.278c-1.389,0-1.601,1.086-1.601,2.206v4.249h-2.667v-8.59h2.559v1.174h0.037 c0.356-0.675,1.227-1.387,2.526-1.387c2.703,0,3.203,1.779,3.203,4.092V18.338z\"><\/path><\/svg><span class=\"wp-block-social-link-label screen-reader-text\">LinkedIn<\/span><\/a><\/li>\n\n\n<li style=\"color:#fff\" class=\"wp-social-link wp-social-link-x has-white-color wp-block-social-link\"><a data-bi-an=\"social media\" data-bi-ct=\"socialshare\" data-bi-ecn=\"Follow X\" data-bi-ehn=\"Rail Menu\" data-bi-hn=\"Rail Menu\" data-bi-socchn=\"X\" rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/msftissues\" class=\"wp-block-social-link-anchor\" data-bi-cn=\"Follow X\"><svg width=\"24\" height=\"24\" viewbox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M13.982 10.622 20.54 3h-1.554l-5.693 6.618L8.745 3H3.5l6.876 10.007L3.5 21h1.554l6.012-6.989L15.868 21h5.245l-7.131-10.378Zm-2.128 2.474-.697-.997-5.543-7.93H8l4.474 6.4.697.996 5.815 8.318h-2.387l-4.745-6.787Z\"><\/path><\/svg><span class=\"wp-block-social-link-label screen-reader-text\">X<\/span><\/a><\/li>\n\n\n<li style=\"color:#fff\" class=\"wp-social-link wp-social-link-instagram has-white-color wp-block-social-link\"><a data-bi-an=\"social media\" data-bi-ct=\"socialshare\" data-bi-ecn=\"Follow Instagram\" data-bi-ehn=\"Rail Menu\" data-bi-hn=\"Rail Menu\" data-bi-socchn=\"Instagram\" rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/www.instagram.com\/msftissues\/\" class=\"wp-block-social-link-anchor\" data-bi-cn=\"Follow Instagram\"><svg width=\"24\" height=\"24\" viewbox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M12,4.622c2.403,0,2.688,0.009,3.637,0.052c0.877,0.04,1.354,0.187,1.671,0.31c0.42,0.163,0.72,0.358,1.035,0.673 c0.315,0.315,0.51,0.615,0.673,1.035c0.123,0.317,0.27,0.794,0.31,1.671c0.043,0.949,0.052,1.234,0.052,3.637 s-0.009,2.688-0.052,3.637c-0.04,0.877-0.187,1.354-0.31,1.671c-0.163,0.42-0.358,0.72-0.673,1.035 c-0.315,0.315-0.615,0.51-1.035,0.673c-0.317,0.123-0.794,0.27-1.671,0.31c-0.949,0.043-1.233,0.052-3.637,0.052 s-2.688-0.009-3.637-0.052c-0.877-0.04-1.354-0.187-1.671-0.31c-0.42-0.163-0.72-0.358-1.035-0.673 c-0.315-0.315-0.51-0.615-0.673-1.035c-0.123-0.317-0.27-0.794-0.31-1.671C4.631,14.688,4.622,14.403,4.622,12 s0.009-2.688,0.052-3.637c0.04-0.877,0.187-1.354,0.31-1.671c0.163-0.42,0.358-0.72,0.673-1.035 c0.315-0.315,0.615-0.51,1.035-0.673c0.317-0.123,0.794-0.27,1.671-0.31C9.312,4.631,9.597,4.622,12,4.622 M12,3 C9.556,3,9.249,3.01,8.289,3.054C7.331,3.098,6.677,3.25,6.105,3.472C5.513,3.702,5.011,4.01,4.511,4.511 c-0.5,0.5-0.808,1.002-1.038,1.594C3.25,6.677,3.098,7.331,3.054,8.289C3.01,9.249,3,9.556,3,12c0,2.444,0.01,2.751,0.054,3.711 c0.044,0.958,0.196,1.612,0.418,2.185c0.23,0.592,0.538,1.094,1.038,1.594c0.5,0.5,1.002,0.808,1.594,1.038 c0.572,0.222,1.227,0.375,2.185,0.418C9.249,20.99,9.556,21,12,21s2.751-0.01,3.711-0.054c0.958-0.044,1.612-0.196,2.185-0.418 c0.592-0.23,1.094-0.538,1.594-1.038c0.5-0.5,0.808-1.002,1.038-1.594c0.222-0.572,0.375-1.227,0.418-2.185 C20.99,14.751,21,14.444,21,12s-0.01-2.751-0.054-3.711c-0.044-0.958-0.196-1.612-0.418-2.185c-0.23-0.592-0.538-1.094-1.038-1.594 c-0.5-0.5-1.002-0.808-1.594-1.038c-0.572-0.222-1.227-0.375-2.185-0.418C14.751,3.01,14.444,3,12,3L12,3z M12,7.378 c-2.552,0-4.622,2.069-4.622,4.622S9.448,16.622,12,16.622s4.622-2.069,4.622-4.622S14.552,7.378,12,7.378z M12,15 c-1.657,0-3-1.343-3-3s1.343-3,3-3s3,1.343,3,3S13.657,15,12,15z M16.804,6.116c-0.596,0-1.08,0.484-1.08,1.08 s0.484,1.08,1.08,1.08c0.596,0,1.08-0.484,1.08-1.08S17.401,6.116,16.804,6.116z\"><\/path><\/svg><span class=\"wp-block-social-link-label screen-reader-text\">Instagram<\/span><\/a><\/li>\n<\/ul>\n<\/div>\n<\/section>\n<\/main>\n","protected":false},"excerpt":{"rendered":"<p>Explore Microsoft&rsquo;s approach to security through law, threat analysis, policy and diplomacy.Explore Microsoft&rsquo;s approach to security through law, threat analysis, policy and diplomacy.Microsoft&rsquo;s Digital Crimes UnitMicrosoft&rsquo;s Digital Crimes Unit (DCU) uses court-authorized civil litigation and technical action to disrupt cybercriminal and nation-state infrastructure. This timeline highlights decades of DCU operations and recognizes that cybercrime disruption [&hellip;]<\/p>\n","protected":false},"author":23,"featured_media":3031,"parent":2651,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_microsoft_sidebar_content":"","_microsoft_bottom_content":"","_microsoft_story_hero_content":"","_microsoft_post_header_content":"","_microsoft_post_header_image_content":"","_microsoft_story_content_prefix_content":"","_microsoft_story_content_suffix_content":"","_microsoft_post_content_prefix_content":"","_microsoft_post_content_suffix_content":"","_microsoft_author-bio_content":"","_microsoft_responsive_featured_images":[],"_microsoft_use_source_image":false,"_microsoft_color_scheme":"default","footnotes":""},"class_list":["post-3029","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Cybersecurity | Microsoft<\/title>\n<meta name=\"description\" content=\"Explore Microsoft&#039;s approach to protecting people, defending global institutions, and advancing digital trust.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cybersecurity | Microsoft\" \/>\n<meta property=\"og:description\" content=\"Explore Microsoft&#039;s approach to protecting people, defending global institutions, and advancing digital trust.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Corporate Responsibility\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-10T13:46:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"767\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"42 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/topics\\\/cybersecurity\\\/\",\"url\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\\\/topics\\\/cybersecurity\\\/\",\"name\":\"Cybersecurity | Microsoft\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\\\/topics\\\/cybersecurity\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\\\/topics\\\/cybersecurity\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/CST-hero-updated-scaled-1.jpeg\",\"datePublished\":\"2026-01-20T21:49:34+00:00\",\"dateModified\":\"2026-08-10T13:46:35+00:00\",\"description\":\"Explore Microsoft's approach to protecting people, defending global institutions, and advancing digital trust.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\\\/topics\\\/cybersecurity\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\\\/topics\\\/cybersecurity\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\\\/topics\\\/cybersecurity\\\/#primaryimage\",\"url\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/CST-hero-updated-scaled-1.jpeg\",\"contentUrl\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/CST-hero-updated-scaled-1.jpeg\",\"width\":2560,\"height\":767},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\\\/topics\\\/cybersecurity\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Topics\",\"item\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/topics\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Cybersecurity\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/#website\",\"url\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\",\"name\":\"Corporate Responsibility\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/#organization\",\"name\":\"Corporate Responsibility\",\"url\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Corporate Responsibility\"},\"image\":{\"@id\":\"https:\\\/\\\/research.codeghost.online\\\/en-us\\\/corporate-responsibility\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cybersecurity | Microsoft","description":"Explore Microsoft's approach to protecting people, defending global institutions, and advancing digital trust.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/","og_locale":"en_US","og_type":"article","og_title":"Cybersecurity | Microsoft","og_description":"Explore Microsoft's approach to protecting people, defending global institutions, and advancing digital trust.","og_url":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/","og_site_name":"Microsoft Corporate Responsibility","article_modified_time":"2026-08-10T13:46:35+00:00","og_image":[{"width":2560,"height":767,"url":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1.jpeg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"42 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/cybersecurity\/","url":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/","name":"Cybersecurity | Microsoft","isPartOf":{"@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/#website"},"primaryImageOfPage":{"@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/#primaryimage"},"image":{"@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/#primaryimage"},"thumbnailUrl":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1.jpeg","datePublished":"2026-01-20T21:49:34+00:00","dateModified":"2026-08-10T13:46:35+00:00","description":"Explore Microsoft's approach to protecting people, defending global institutions, and advancing digital trust.","breadcrumb":{"@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/#primaryimage","url":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1.jpeg","contentUrl":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/01\/CST-hero-updated-scaled-1.jpeg","width":2560,"height":767},{"@type":"BreadcrumbList","@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/\/topics\/cybersecurity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/"},{"@type":"ListItem","position":2,"name":"Topics","item":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/topics\/"},{"@type":"ListItem","position":3,"name":"Cybersecurity"}]},{"@type":"WebSite","@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/#website","url":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/","name":"Corporate Responsibility","description":"","publisher":{"@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/#organization","name":"Corporate Responsibility","url":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/#\/schema\/logo\/image\/","url":"","contentUrl":"","caption":"Corporate Responsibility"},"image":{"@id":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/pages\/3029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/comments?post=3029"}],"version-history":[{"count":0,"href":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/pages\/3029\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/pages\/2651"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/media\/3031"}],"wp:attachment":[{"href":"https:\/\/research.codeghost.online\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/media?parent=3029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}