logo

Microsoft disrupts massive RedVDS cybercrime virtual desktop service

ID: d7fa6179-222c-5c1e-be39-5cfdcb7f7ae3

STIX ID: report--d7fa6179-222c-5c1e-be39-5cfdcb7f7ae3

Feed Name: Bleeping Computer

Threat Score
85/100

Date Published: 2026-01-15

Date Updated: 2026-04-20

Author: Sergiu Gatlan

...
...

Microsoft disrupted RedVDS, a global cybercrime‑as‑a‑service marketplace that sold disposable Windows virtual machines to criminals since 2019. The service enabled mass phishing, credential theft, business email compromise, and large-scale fraud (reported losses of ~$40M and hundreds of thousands of compromised accounts), used AI-generated content and deepfakes to improve scams, and left a unique fingerprint (common computer name WIN-BUNS25TD77J) that aided investigation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.