Home/Events/Microsoft Disrupts EvilTokens AI-Assisted Scam Platform Compromising 12,000 Accounts

Microsoft Disrupts EvilTokens AI-Assisted Scam Platform Compromising 12,000 Accounts

Confirmed
Confidence
90%
Impact: 80%
Updated 1h ago

Consensus Brief

Microsoft has disrupted a subscription-based scam platform named EvilTokens that compromised 12,000 Microsoft accounts across 10,000 organizations globally. The platform utilized an AI chatbot to automate the process of identifying targets and drafting fraudulent communications. The operation led to the seizure of 50 websites and the arrest of two individuals by the UK’s Metropolitan Police Service.

Sourced from
Primary: Ars Technica

What Changed Since Last Update

1h ago

The disruption of EvilTokens marks a significant shift in the speed and efficiency of cybercriminal operations, enabling rapid analysis of compromised email accounts.

Claim Ledger

4 claims tracked across sources

Confirmed Fact

EvilTokens compromised 12,000 customer accounts belonging to 10,000 organizations.

Confirmed Fact

Microsoft seized 50 websites and 150 domains used to operate EvilTokens.

Confirmed Fact

The UK’s Metropolitan Police Service arrested two men on suspicion of offenses connected to the crime platform.

Confirmed Fact

EvilTokens automated the sending of large numbers of spam and analyzed 5,000 compromised emails at a time.

Role-Based Impact Analysis

Source Timeline

1 source corroborating