Microsoft disrupts AI-assisted platform that compromised 12,000
Microsoft seized EvilTokens, an AI-chatbot BEC platform that compromised 12,000 accounts across 10,000 organizations.
Microsoft led an industry-wide disruption of EvilTokens, a Telegram-marketed subscription service ($1,500 initial plus $500/month) whose AI chatbot analyzed victims' inboxes, identified high-value targets, and drafted impersonation emails for business email compromise. Users compromised 12,000 Microsoft accounts at 10,000 organizations, concentrated in the US, Canada, UK, Australia, India, and France. Microsoft seized 50 websites and 150 domains, and the UK Metropolitan Police arrested two suspects. Account takeovers abused legitimate OAuth device code authentication.
- EvilTokens AI chatbot automated BEC targeting and lure drafting
- 12,000 accounts at 10,000 organizations compromised since February
- Microsoft seized 50 websites and 150 domains; UK police arrested two men
- Abused OAuth device code authentication to hijack accounts
From the original article
2 min read at arstechnica.com
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
By Dan Goodin · arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.