NEWS · COMPANIES · #817
Microsoft disrupts EvilTokens AI-assisted scam platform that compromised 12,000 accounts
Microsoft said it led an industry-wide disruption of EvilTokens, a subscription-based scam platform introduced via Telegram that used an AI-style chatbot to analyze inboxes, craft lures, and automate OAuth device-code abuse to compromise about 12,000 Microsoft accounts across roughly 10,000 organizations. Microsoft and partners seized dozens of sites and domains; SpyCloud assisted the takedown and the UK’s Metropolitan Police Service made arrests tied to the operation.
KEY POINTS
- Microsoft said it led an industry-wide disruption of EvilTokens, a subscription-based scam platform introduced via Telegram that used an AI-style chatbot to analyze inboxes, craft lures, and automate OAuth device-code abuse to compromise about 12,000 Microsoft accounts across roughly 10,000 organizations.
- Microsoft and partners seized dozens of sites and domains; SpyCloud assisted the takedown and the UK’s Metropolitan Police Service made arrests tied to the operation.
- Demonstrates how AI-assisted tooling can massively accelerate targeted email compromise and fraud, underscoring the need for stronger identity protections and transaction verification.
WHY IT MATTERS
Demonstrates how AI-assisted tooling can massively accelerate targeted email compromise and fraud, underscoring the need for stronger identity protections and transaction verification.