logo

Microsoft disrupts RedVDS cybercrime platform behind $40 million in scam losses

ID: 0d6887bb-7acd-5368-83cc-ce9da2cc4be5

STIX ID: report--0d6887bb-7acd-5368-83cc-ce9da2cc4be5

Feed Name: The Record from Recorded Future News

Threat Score
78/100

Date Published: 2026-01-14

Date Updated: 2026-05-01

...
...

Microsoft and international partners dismantled RedVDS, a subscription-based cybercrime service that rented disposable Windows RDP hosts to criminals for large-scale phishing and business email compromise; the platform enabled mass-mailing, credential and token theft, and payment diversion fraud that Microsoft links to more than $40M in losses and roughly 191,000 compromised Microsoft email accounts across 130,000+ organizations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.