Threat Intelligence
Yam Store: The Cybercrime Marketplace Behind More Than a Billion Phishing Messages
Dark Reading · 15 Oct 2026
Key Takeaway
Assume phishing emails will reach your staff, so turn on multi-factor authentication for email and key accounts and train your team to report suspicious messages before clicking.
Dark Reading reports on Yam Store, a sprawling cybercrime marketplace that supplied cloud infrastructure and phishing kits to criminals. Together, these tools helped fuel more than 1 billion phishing messages around the world.
The scale matters because of how the marketplace works. Phishing kits are ready-made tools that make it easier to build convincing fake messages and pages, and cloud infrastructure gives attackers somewhere to run them. When both are sold in one place, criminals with little technical skill can launch campaigns that once required more expertise. Small businesses are often targeted by this kind of high-volume activity.