Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
TL;DR
- Microsoft disrupted EvilTokens, a subscription-based scam platform utilizing an AI chatbot.
- EvilTokens helped cybercriminals compromise over 12,000 Microsoft accounts.
- The platform automated inbox analysis, target selection, and scam email drafting.
- Compromises were achieved using a legitimate OAuth process called device code authentication.
- Microsoft seized 50 websites and 150 domains used by EvilTokens.
- Two men were arrested in the UK in connection with the platform.
- The AI-assisted tools significantly reduced the time for attackers to analyze organizational structures and relationships.