Microsoft has taken legal action against a global cybercrime network known as Storm-2139, which is accused of developing and distributing tools to bypass generative AI guardrails for creating harmful content, including celebrity deepfakes and non-consensual intimate images. The network comprises key figures such as Arian Yadegarnia from Iran, Alan Krysiak from the UK, Ricky Yuen from Hong Kong, and Phát Phùng Tấn from Vietnam, along with two (2) unnamed U.S. individuals based in Illinois and Florida. Storm-2139 exploited exposed customer credentials to unlawfully access AI services, reconfiguring them to generate illicit content. The network is organized into creators, who develop the tools; providers, who distribute them; and users, who employ them to create content that violates Microsoft’s policies. Microsoft’s legal efforts began with a lawsuit filed in December 2024 in the Eastern District of Virginia. A temporary restraining order and preliminary injunction allowed Microsoft to seize a website integral to Storm-2139’s operations, disrupting the group’s activities and prompting internal conflict. The seizure led to members turning on each other, speculating about the identities of “John Does” listed in the filings, and doxing Microsoft lawyers. Some members even emailed Microsoft, attempting to shift blame within the group. Microsoft is preparing criminal referrals to U.S. and international law enforcement agencies to further dismantle Storm-2139’s operations and deter others from misusing AI technology.