Microsoft Disrupts Operations of Major Cybercrime Group Storm-1152

The Vietnam-based group, known for creating and selling fraudulent Microsoft accounts, has been significantly impacted following a court-ordered seizure of its U.S.-based infrastructure and websites.

Microsoft, with assistance from Arkose Labs, has disrupted the operations of Storm-1152, a Vietnam-based group known for creating and selling fraudulent Microsoft accounts.
Storm-1152, described as the 'number one seller and creator of fraudulent Microsoft accounts', has created approximately 750 million fraudulent accounts, earning millions of dollars in illicit revenue.
The group operated websites such as Hotmailbox.me, which sold fraudulent Microsoft Outlook accounts, and 1stCAPTCHA, AnyCAPTCHA, and NoneCAPTCHA, which sold tools to bypass identity verification software.
Microsoft's action follows a court order from the Southern District of New York, which allowed the company to seize U.S.-based infrastructure and websites used by Storm-1152.
Microsoft has identified the individuals leading Storm-1152's operations as Duong Dinh Tu, Linh Van Nguyễn (also known as Nguyễn Van Linh), and Tai Van Nguyen, all based in Vietnam.