Microsoft Shuts Down AI-Powered Cybercrime Platform Linked to 12,000 Compromised Email Accounts

Microsoft has disrupted EvilTokens, an AI-powered cybercrime service that helped attackers break into email accounts and build financial scams. The platform was launched in February and had been linked to over 12,000 compromised inboxes across 10,000 organizations worldwide.

The platform used an AI chatbot to analyze messages, map relationships, identify employees involved in payments, and recommend ways to impersonate trusted contacts.

Microsoft's disruption of EvilTokens has also led to the arrest of two men in the UK. The company worked with several partners, including Cloudflare and Coinbase, to take down 50 websites and disable over 150 domains supporting the service.