{
  "id": 9198778,
  "title": "Microsoft disrupts AI-assisted platform that compromised 12,000 accounts",
  "url": "https://urgent.news/2026/09/22/microsoft-disrupts-ai-assisted-platform-that-compromised-12-000",
  "topic": "ai",
  "section": "AI",
  "published": "2026-09-22T19:45:47.000Z",
  "source": {
    "name": "Ars Technica",
    "slug": "ars-technica",
    "url": "https://arstechnica.com/security/2026/09/microsoft-disrupts-ai-assisted-platform-that-compromised-12000/"
  },
  "original_language": "en",
  "account": "Microsoft announced on Tuesday that it had coordinated an industry-wide disruption of a subscription-based scam platform, named EvilTokens, which had compromised 12,000 Microsoft accounts over a few months. The platform, which was introduced through a Telegram channel in February, required an initial fee of $1,500 and a recurring monthly charge of $500 thereafter. EvilTokens provided a streamlined service for cybercriminals to compromise email accounts en masse, analyzing inboxes to identify potential targets and draft convincing emails to trick employees into transferring funds to attacker-controlled accounts. At the heart of EvilTokens was an AI-style chatbot that could identify trusted relationships, payment authorizations, and sensitive responsibilities within victims' inboxes to maximize the likelihood of successful fraud. The chatbot could also suggest fraudulent strategies, such as impersonating trusted contacts to deceive victims.",
  "summary": "EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}