Disrupting Fox Tempest: A cybercrime service that turned “verified” software into a pathway for ransomware
#FoxTempest
https://blogs.microsoft.com/on-the-issues/2026/05/19/disrupting-fox-tempest-a-cybercrime-service/
Cybercrime service disrupted for abusing Microsoft platform to sign malware

Microsoft says it has disrupted a malware-signing-as-a-service (MSaaS) operation that abused the company's Artifact Signing service to generate fraudulent code-signing certificates used by ransomware gangs and other cybercriminals.

BleepingComputer

Microsoft Disrupts Malware-Signing Service Used in Ransomware Attacks

Microsoft swooped in to shut down a notorious malware-signing service, seizing the website signspace.cloud and taking down hundreds of virtual machines used to fuel ransomware attacks. This bold move, dubbed OpFauxSign, crippled a key operation run by the threat actor Fox Tempest, which had been using Microsoft's own system against…

https://osintsights.com/microsoft-disrupts-malware-signing-service-used-in-ransomware-attacks?utm_source=mastodon&utm_medium=social

#MalwareOperations #Ransomware #Microsoft #FoxTempest #Opfauxsign

Microsoft Disrupts Malware-Signing Service Used in Ransomware Attacks

Microsoft disrupts Fox Tempest's malware-signing service used in ransomware attacks, seizing key sites and VMs, learn how they took down the operation now.

OSINTSights

Microsoft Disrupts Cybercrime Service Selling Code-Signing Certificates to Ransomware Gangs

Microsoft has disrupted a notorious cybercrime operation, dubbed Fox Tempest, that sold code-signing certificates to ransomware gangs, allowing them to disguise malware as legitimate Windows software. The operation, which created over 580 fake Microsoft accounts, has been linked to two individuals, John…

https://osintsights.com/microsoft-disrupts-cybercrime-service-selling-code-signing-certificates-to-ranso?utm_source=mastodon&utm_medium=social

#CodeSigningCertificates #Ransomware #FoxTempest #Microsoft #Cybercrime

Microsoft Disrupts Cybercrime Service Selling Code-Signing Certificates to Ransomware Gangs

Microsoft disrupts Fox Tempest, a cybercrime service selling code-signing certificates; read how the operation enabled ransomware gangs and what it means for cybersecurity, learn more now.

OSINTSights

Microsoft Disrupts Malware-Signing Service Used by Ransomware Gangs

Microsoft cracked down on a notorious malware-signing service used by ransomware gangs, disrupting the operations of Fox Tempest, a financially motivated group that generated millions of dollars in profits by selling trust to cybercriminals. The group had created over 1,000 code-signing certificates and hundreds of Azure tenants to support…

https://osintsights.com/microsoft-disrupts-malware-signing-service-used-by-ransomware-gangs?utm_source=mastodon&utm_medium=social

#MalwareOperations #Ransomware #Microsoft #Azure #FoxTempest

Microsoft Disrupts Malware-Signing Service Used by Ransomware Gangs

Discover how Microsoft disrupted Fox Tempest's malware-signing service. Learn more about the industrial-scale scheme and take action against ransomware gangs now.

OSINTSights

Microsoft Disrupts Malware Signing Service Used by Ransomware Groups

Microsoft cracked down on a sophisticated malware signing service run by a group called Fox Tempest, which helped ransomware gangs disguise their malicious programs as legitimate software. This service was like a master forgery operation, creating counterfeit digital signatures that even experts struggled to spot.

https://osintsights.com/microsoft-disrupts-malware-signing-service-used-by-ransomware-groups?utm_source=mastodon&utm_medium=social

#FoxTempest #MalwareOperations #Ransomware #CodeSigning #ArtifactSigning

Microsoft Disrupts Malware Signing Service Used by Ransomware Groups

Learn how Microsoft disrupted Fox Tempest's malware signing service used by ransomware groups and what it means for cybersecurity; read the full story now.

OSINTSights

Microsoft Disrupts Fox Tempest's Ransomware-Enabling Code-Signing Service

Microsoft's Digital Crimes Unit has successfully disrupted a notorious code-signing service used by cybercriminals, including the group behind Fox Tempest, to create fake IDs and gain easy access to systems. This operation has effectively shut down a key tool used by hackers to spread ransomware and malware.

https://osintsights.com/microsoft-disrupts-fox-tempests-ransomware-enabling-code-signing-service?utm_source=mastodon&utm_medium=social

#Ransomware #CodeSigning #FoxTempest #MicrosoftDigitalCrimesUnit #MalwareOperations

Microsoft Disrupts Fox Tempest's Ransomware-Enabling Code-Signing Service

Microsoft disrupts Fox Tempest's code-signing service, stopping ransomware attacks. Learn how they took down the cybercriminals and what it means for cybersecurity, read now and stay protected.

OSINTSights