Crypto
Coinbase Helps Dismantle EvilTokens Phishing Service, Aiding Microsoft
Microsoft and Coinbase collaborated to dismantle EvilTokens, an AI-assisted phishing service that compromised over 12,000 mailboxes worldwide.
The operation seized 50 websites and disabled more than 150 related domains. UK police arrested two men on September 11 in connection with the case.
Coinbase's Global Intelligence team traced $1.1 million across four Tron addresses between October 2025 and June 2026, identifying over 1,000 deposits from more than 700 distinct addresses.
The exchange combined this data with merchant records, device information, and open-source intelligence to attribute the platform before referring the matter to London's Metropolitan Police.