Microsoft and Authorities Dismatles BEC Attack Chain Powered By RedVDS Fraud Engine

**Executive summary:** Microsoft, supported by U.S., U.K., German authorities and Europol, dismantled RedVDS — a subscription-based cybercrime-as-a-service marketplace that rented disposable virtual machines and proxy infrastructure to criminals for phishing, BEC and AI-driven deepfake fraud; telemetry linked RedVDS to roughly $40M in verified U.S. losses, thousands of high-value compromises (including multi-million-dollar BECs), daily mass-phishing activity, and impacts across 191,000 organizations worldwide, and authorities seized key domains and servers to disrupt the service and enable attribution.