Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
5 IOCs

Disruption Targets Major Chinese-Language Phishing Kits with Japanese Focus

Proofpoint Threat Insight
Proofpoint Threat Insight
Published October 14, 2026Original Report

Excerpt

Key findings A disruption action targeting prominent players across the Chinese-speaking phishing and fraud ecosystem struck a blow to the most high-volume threats in Proofpoint data. Proofpoint supported Microsoft and other private and public partners in the civil lawsuit and takedown action. The highest-volume direct email threats in Proofpoint campaign data come from three phishing kits our researchers named CoGUI, CoAceV, and CoFish_Ws, which all actively target Japanese…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREhttps://paidy.farrada…https://lygyaou.com/9…https://ylhgkj.com/BC…CAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(5)
Capability
Victim

Indicators of Compromise

Open the mindmap →

5 indicators

TypeIndicatorConfidenceScoreFirst Seen
URLhttps://paidy.farradae.com/paidy/ubmissionsjpHighScore 58/100First seen
URLhttps://lygyaou.com/9AioLNhtdi.kumamoto-city.jpHighScore 58/100First seen
URLhttps://ylhgkj.com/BCuXkTPfKZ.kumamoto-city.jpHighScore 58/100First seen
URLhttps://kenandy.shop/paidy/ubmisionsjp/HighScore 58/100First seen
URLhttps://new-app-haixing.com/1DWSd1DeDf.kumamoto-city.jpHighScore 58/100First seen

IOC Relationship Graph

Building graph…