Microsoft dismantles AI-powered phishing platform EvilTokens, arrests two suspects

Coinbase: Coinbase is a cryptocurrency exchange that partnered with Microsoft on the investigation into EvilTokens. It assisted in tracing revenue flows associated with the platform's operations. Microsoft: Microsoft is a major technology company that develops software, cloud computing services, and security tools through its Digital Crimes Unit. In this development, the company obtained court authorization to seize websites and disable domains tied to the EvilTokens platform, collaborating with industry partners and law enforcement to disrupt the operation. EvilTokens: EvilTokens is an AI-powered cybercrime platform that offered subscription-based phishing tools and AI chatbots to analyze compromised email accounts for fraud opportunities. It was dismantled by Microsoft after being used to breach inboxes across multiple sectors, with two individuals arrested by British police in connection to the service. Steven Masada: Steven Masada serves as associate general counsel and general manager in Microsoft's Digital Crimes Unit. He highlighted how AI technology was employed both to build the malicious tools and to enable fraud by users of the EvilTokens platform. Cybercrime Evolution: AI models are enabling hackers to accelerate and scale traditional phishing attacks while reducing the skill barrier for participants. Law Enforcement Response: Technology firms are increasingly obtaining court orders to seize infrastructure used by cybercrime services in coordination with police.