Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud

com/microsoft-ev... The popular phishing-as-a-service platform used AI throughout the attack chain, allowing cybercriminals to steal tokens for account takeover and business email compromise.

2 reportsother

Claim audit

No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.

All coverage

⚠️ CRITICAL: Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud EvilTokens, a phishing-as-a-service platform, compromised over 12,000 Microsoft customer

mastodon:infosec-exchangeother5d ago kagi ↗

⚠️ CRITICAL: Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud EvilTokens, a phishing-as-a-service platform, compromised over 12,000 Microsoft customer email accounts across 10,000+ organizations by stealing session tokens for business email compromise and financial fraud. The platform used AI-driven phishing to enable attackers to conduct unauthoriz