Skip to content
Microsoft and Authorities Dismantle RedVDS-Powered BEC Attack Chain

Microsoft and Authorities Dismantle RedVDS-Powered BEC Attack Chain

First seen 15 Jan 2026, 18:00 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Microsoft, in collaboration with international law enforcement, has dismantled a business email compromise (BEC) attack chain that utilized the RedVDS fraud engine. This platform provided criminals with low-cost access to disposable virtual machines mimicking legitimate Windows systems, enabling large-scale phishing attacks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 218d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track RedVDS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed