Microsoft Takes Down Major AI-Powered Phishing Service

A major AI-powered phishing service called EvilTokens has suffered a significant blow after Microsoft took down its digital infrastructure. The platform, which relied on AI tools for its operations, used a subscription model to charge hackers $1,500 initiation fees and $500 monthly access fees.

Evidence suggests that the same technology used to build EvilTokens was also 'vibe coded,' or built using AI tools itself, underscoring how AI is being used on both sides of cybercrime operations. This has led experts to warn about the dangers of AI being misused in cyberattacks, which can have devastating consequences for businesses and individuals.

Microsoft's Digital Crimes Unit worked with law enforcement partners to seize 50 websites used by EvilTokens and disable over 150 additional domains tied to its infrastructure. The operation resulted in the arrest of two men, aged 32 and 38, in connection to the platform.