Microsoft disrupted EvilTokens, an AI-powered cybercrime platform. It used AI to analyze inboxes and recommend fraud strategies. The platform compromised over 12,000 email inboxes across 10,000 organizations. Microsoft seized 50 websites and disabled 150 domains tied to EvilTokens. UK police arrested two men linked to its operation. EvilTokens automated target selection and message drafting for financial fraud. It charged a $1,500 fee and $500 monthly subscription. The service also used AI to help build its own platform. Healthcare, financial services, and education were among targeted sectors. Partners included Health-ISAC, Cloudflare, Coinbase, OpenAI, and law enforcement.
What changed
Criminals manually sifted through emails to find fraud targets and draft messages.
What it unlocks
Automated identification of high-value targets and drafting of impersonation messages for fraud.
- 12,000 compromised email inboxes
- 10,000 organizations worldwide
- $1,500 initiation fee
- $500 monthly subscription
Sources