Microsoft disrupts Fox Tempest malware-signing service

Microsoft disrupted Fox Tempest, a malware-signing-as-a-service operation that abused Microsoft's Artifact Signing service to create fraudulent code-signing certificates used by ransomware gangs and cybercriminals. The disruption involved seizing infrastructure, taking down virtual machines, and unsealing a legal case in U.S. District Court.

This is a long-running storyline that has developed over 15 days. The homepage highlights its most recent activity, so the outlet count there reflects the latest wave. The totals above cover the full run.