AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft
Microsoft disrupted EvilTokens, an AI-powered phishing platform that compromised 12,000+ email accounts across 10,000+ organizations.
Microsoft disrupted EvilTokens, an AI-powered phishing platform that compromised over 12,000 email accounts at more than 10,000 organizations. The platform used AI to automate device code phishing and account reconnaissance, requiring a $1,500 initial fee and $500 monthly subscription. Two suspects were arrested in the UK, and Microsoft seized 50 websites, with support from partners including SpyCloud, Coinbase, and OpenAI.
- Microsoft disrupted EvilTokens, an AI-powered phishing platform targeting 10,000+ organizations.
- The platform used device code phishing to compromise over 12,000 email accounts globally.
- EvilTokens utilized AI for phishing email creation and inbox reconnaissance.
- Two individuals were arrested in the UK, and 50 websites were seized.
- Law enforcement and private partners collaborated on the takedown.
- Threat actors
- Felix UtomiWaidi Segun Adams
- Victims
- 10,000+ organizations
- Organizations
- CloudflareCoinbaseHealth-ISACMicrosoftOpenAIRailwaySpyCloudTRM LabsThe Shadowserver Foundation
- AI models
- EvilTokens
From the original article
2 min read at securityweek.com
The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets. The post AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.