MICROSOFT SECURITY BLOG
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Strategic summary
Phishing kits and cloud-environment credentials are traded as industrialised goods on a Chinese-language marketplace, so the exposed surface lies less in own code than in hardening identities and mail access.