Intel Name: Cogui phish kit targets japan with millions of messages
Date of Scan: May 7, 2025
Impact: High
Summary: Our team has observed a surge in large-scale phishing campaigns written in Japanese, primarily targeting organizations in Japan using a phishing kit known as CoGUI. These campaigns often impersonate well-known consumer and payment brands like Amazon, PayPay, and Rakuten. CoGUI is a stealthy phishing framework designed to evade detection, with Japan being its main focus. While similar activity has been spotted in countries like Australia, New Zealand, Canada, and the U.S., it remains far less frequent.
