# Disrupting Large-Scale Chinese-Language Phishing Operations Security experts analyze the takedown of major phishing kits targeting Japanese organizations. - **Source:** [Hacking Humans](https://brifing.si/source/5c2a25b7-81b2-4f80-9066-74997292410d) - **Published:** 2026-11-03 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/759f60e1-9aec-4d66-97c1-b3c885ab70c5 ## New Security Podcast Launch The podcast Only Malware in the Building debuts as a monthly series hosted by Proofpoint analyst Selena Larson. Alongside N2K Networks' Dave Bittner and former FBI investigator Keith Mularski, the show adopts a detective-style approach to dissecting modern cyber threats. They aim to solve complex puzzles through expert analysis and evidence gathering. ## Focus on Phishing Ecosystems This inaugural episode investigates the expanding Chinese-speaking cybercrime landscape. The hosts specifically examine the rise of threat actors responsible for orchestrating large-scale credential phishing campaigns. By analyzing these criminal networks, the team provides insights into how sophisticated phishing operations are structured and maintained to bypass traditional security defenses globally. ## Targeted Phishing Kit Disruption The discussion centers on the recent disruption of three specific phishing kits: CoGUI, CoAceV, and CoFish_Ws. These tools have been instrumental in launching hundreds of millions of malicious messages. The operation highlights the technical infrastructure behind these kits and the collaborative efforts required to dismantle such persistent and widespread cybercriminal tools. ## Impact on Japanese Organizations The identified phishing kits primarily targeted Japanese organizations, causing significant security challenges for the region. By examining the specific tactics used in these campaigns, the hosts illustrate how localized threats often leverage global infrastructure. This case study serves as a critical example of how regional focus remains a hallmark of modern cybercrime. ## Investigative Methodology in Cybersecurity The hosts compare the role of a security researcher to that of a detective. This methodology involves gathering digital clues, analyzing forensic evidence, and consulting with industry experts to piece together cyber puzzles. This structured approach is essential for identifying the actors behind complex, multi-stage phishing campaigns that evade automated detection. ## Analyzing Takedown Consequences Beyond the immediate disruption, the hosts explore what this takedown signifies for the broader cybercrime landscape. They evaluate whether such interventions effectively deter threat actors or merely force them to pivot to new infrastructure. Understanding these outcomes is vital for security professionals tasked with defending against evolving, high-volume phishing threats. ## Expertise Behind the Analysis Keith Mularski, former FBI cybercrime investigator and current Chief Global Ambassador at Qintel, brings significant law enforcement perspective to the discussion. His background provides context on how private-sector intelligence intersects with global investigative efforts. This collaboration between analysts and former investigators enhances the depth of the threat intelligence shared. ## Future of Threat Intelligence The podcast emphasizes the necessity of continuous monitoring and proactive disruption in the fight against credential phishing. As threat actors refine their kits, the security community must adapt its investigative techniques. This series provides a platform for ongoing education regarding the mechanics of cybercrime and the strategic responses needed today. ## Sources covering this story - https://thecyberwire.com/podcasts/only-malware-in-the-building/29/notes — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._