Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
Microsoft announced on Tuesday that it had coordinated an industry-wide disruption of a subscription-based scam platform, named EvilTokens, which had compromised 12,000 Microsoft accounts over a few months. The platform, which was introduced through a Telegram channel in February, required an initial fee of $1,500 and a recurring monthly charge of $500 thereafter.
EvilTokens provided a streamlined service for cybercriminals to compromise email accounts en masse, analyzing inboxes to identify potential targets and draft convincing emails to trick employees into transferring funds to attacker-controlled accounts. At the heart of EvilTokens was an AI-style chatbot that could identify trusted relationships, payment authorizations, and sensitive responsibilities within victims' inboxes to maximize the likelihood of successful fraud.
The chatbot could also suggest fraudulent strategies, such as impersonating trusted contacts to deceive victims.
Written by urgent.news from Ars Technica's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
