Microsoft disrupts EvilTokens AI-assisted scam platform that compromised 12,000 accounts
Microsoft said it led an industry-wide disruption of EvilTokens, a subscription-based scam platform introduced via Telegram that used an AI-style chatbot to analyze inboxes, craft lures, and automate OAuth device-code abuse to compromise about 12,000 Microsoft accounts across roughly 10,000 organizations. Microsoft and partners seized dozens of sites and domains; SpyCloud assisted the takedown and the UK’s Metropolitan Police Service made arrests tied to the operation.