Microsoft removes ‘AI chatbot’ that hacked 12,000-plus emails in 10,000 firms globally
Microsoft has made significant strides by taking down EvilTokens, a dangerous subscription service that exploited over 12,000 accounts via advanced AI tools. By automating hacking tasks and generating realistic phishing messages from victims' emails, the platform posed a substantial threat. Following the incident, UK authorities apprehended two individuals tied to the scheme, with Microsoft…
Microsoft has announced the dismantling of a subscription-based scam platform that utilized an AI chatbot to compromise over 12,000 Microsoft accounts across more than 10,000 firms worldwide. The platform, known as EvilTokens, began operating on a Telegram channel in February, charging users a $1,500 initial fee and a $500 monthly fee.
The service streamlined the process of hacking email accounts at scale, identifying potential targets, impersonating trusted contacts, and drafting convincing emails to trick individuals into transferring funds. EvilTokens employed an AI-style chatbot that analyzed victims' inboxes, pinpointing relationships, payment authority, sensitive roles, and other potential vulnerabilities.
The platform operated through a legitimate OAuth authentication process called device code authentication, automating the process of generating device codes for attackers to gain unauthorized access. Microsoft seized 50 websites and disabled 150 additional domains related to the scam, leading to the arrest of two men in the UK for suspected involvement.
The attack marked a significant shift in the tactics used for mass account compromises, with AI playing a crucial role in identifying and exploiting vulnerabilities.
Written by urgent.news from Times of India's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
