Microsoft, Law Enforcement Disrupt RedVDS Global Cybercrime Service

Microsoft, Europol, and other authorities seized infrastructure and domains associated with RedVDS (attributed to actor Storm-2470), a subscription-based virtual desktop service that since 2019 — and heavily from 2025 onward — enabled large-scale phishing, BEC, account takeover, and real-estate/financial frauds; the service facilitated mass mailings (millions per day), leveraged cloned/unlicensed Windows images and AI-based impersonation, has been linked to roughly $40M in theft and impacts on hundreds of thousands of organizations worldwide, and relied on third-party hosting across multiple countries.