Microsoft disrupted Fox Tempest’s MSaaS using 72-hour certificates, cutting signed malware delivery worldwide.

The downstream impact of that service’s operations “has resulted in attacks against a broad range of industry sectors” in the U.S. and other nations, the company said.

Microsoft estimates that Fox Tempest generated more than 1,000 certificates and operated hundreds of Azure tenants and subscriptions.