Microsoft disrupted EvilTokens, an AI-powered phishing service that helped criminals automate account compromise, inbox analysis, and fraud targeting. Working with U.K. police and multiple partners, Microsoft seized infrastructure, enabled arrests, and said the platform had affected thousands of email accounts worldwide. #EvilTokens #Microsoft #MetropolitanPoliceService #HealthISAC #Cloudflare #Coinbase #TheShadowserverFoundation #TRMLabs
Keypoints
- Microsoft took EvilTokens offline through a court-authorized disruption.
- U.K. police arrested two men suspected of operating the phishing service.
- EvilTokens used AI to analyze inboxes and recommend fraud targets and tactics.
- The platform automated device code phishing and other account takeover methods.
- Microsoft seized 50 websites and disabled 150 domains tied to the operation.
Read More: https://therecord.media/two-arrested-in-uk-after-microsoft-takedown-eviltokens