UK Cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites
UK police arrested two EvilTokens admins as Microsoft seized sites used to phish over 12,000 inboxes.
Microsoft and partners disrupted EvilTokens, a device-code phishing kit sold as a service that compromised more than 12,000 email inboxes at over 10,000 organizations. The kit bypassed MFA to access Microsoft 365 and used an AI chatbot to analyze inboxes and select impersonation and fraud tactics. After a US court order, Microsoft seized 50 websites and disabled more than 150 related domains, with Health-ISAC as co-plaintiff. On September 18, London's Metropolitan Police arrested two alleged administrators, ages 32 and 38, who were later released on bail.
- EvilTokens compromised 12,000 inboxes across more than 10,000 organizations.
- Device-code phishing bypassed MFA and granted Microsoft 365 access.
- An AI chatbot mined inboxes to choose targets and fraud tactics.
- Microsoft seized 50 websites and disabled more than 150 domains.
- London police arrested two alleged administrators, both later bailed.
From the original article
2 min read at theregister.comUsed by crims to compromise 12K+ email inboxes across 10K+ global orgs
By Jessica Lyons · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.