Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud
Microsoft and law enforcement partners have disrupted EvilTokens, a phishing-as-a-service platform that used AI tools to help criminals steal authentication tokens and carry out account takeover and business email compromise attacks at scale.
Why this matters: Phishing-as-a-service means that running a financial fraud operation no longer requires much skill. Platforms like EvilTokens package the whole attack — AI included — and rent it out. That lowers the bar for who can target your accounts and your employer's email. Token theft is especially nasty because it bypasses passwords entirely. Once someone has your session token, your multi-factor authentication does not help. Disruptions like this matter, but the underlying market for these tools does not disappear with one takedown.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.