Microsoft’s EvilTokens Takedown Sheds Light on State of AI-Powered Cybercrime
- On Tuesday, Microsoft and industry partners disrupted EvilTokens, an AI-enabled phishing service linked to 12,000 compromised email inboxes across more than 10,000 organizations globally.
- EvilTokens utilized an AI-style chatbot to analyze victims' inboxes and identify sensitive details, allowing cybercriminals to bypass multi-factor authentication to silently authenticate as victims.
- Late last week, Microsoft seized 50 websites used to operate the service, while London's Metropolitan Police Service arrested two men, aged 32 and 38, who allegedly acted as administrators.
- Coinbase traced about $1.1 million in revenue for EvilTokens from paying customers, while Microsoft correlated at least 13 complaints representing approximately $1.7 million in reported losses.
- Experts advise organizations to treat unsolicited device codes as a red flag, assuming that once an inbox is compromised, criminals may understand its contents in minutes, not days.
41 Articles
41 Articles
Microsoft Dismantles EvilTokens Cybercrime Platform That Used AI Chatbots to Breach 12,000 Accounts Globally; Details Here | 📲 LatestLY
Microsoft has dismantled EvilTokens, a subscription-based cybercrime platform that used an AI chatbot to target more than 12,000 accounts across over 10,000 organisations. The service automated phishing campaigns and exploited device code authentication to bypass security controls. Authorities seized 50 websites, disabled over 150 domains and arrested two suspects in the UK. 📲 Microsoft Dismantles EvilTokens Cybercrime Platform That Used AI Cha…
EvilTokens did not just steal accounts: AI read their emails, located trusted relationships and wrote the following deception
Microsoft takes down EvilTokens service that used AI to turn stolen inboxes into payment fraud
The service, marketed through a Telegram channel, combined device-code phishing with automated analysis of stolen inboxes. Microsoft said it has now disrupted the operation, seizing 50 websites and 150 additional domains through legal action and partner coordination. The Metropolitan Police Service in the United Kingdom also arrested two men on...Read Entire Article
Coverage Details
Bias Distribution
- 77% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
