Microsoft and Google collaborated through the Global Signal Exchange to dismantle RedVDS, a $66 million cybercrime marketplace selling virtual machines with pirated software used for phishing and fraud attacks. The operation targeted 130,000 organizations and compromised 191,000 Microsoft email accounts between September and December 2025. Coordinated action resulted in domain seizures in the UK and US, server seizures in Germany, and Europol involvement.