{
  "id": 9340627,
  "title": "Microsoft takes down EvilTokens service that used AI to turn stolen inboxes into payment fraud",
  "url": "https://urgent.news/2026/09/23/microsoft-takes-down-eviltokens-service-that-used-ai-to-turn-stolen",
  "topic": "ai",
  "section": "AI",
  "published": "2026-09-23T13:01:00.000Z",
  "source": {
    "name": "TechSpot",
    "slug": "techspot",
    "url": "https://www.techspot.com/news/113952-microsoft-takes-down-eviltokens-service-used-ai-turn.html"
  },
  "original_language": "en",
  "account": "Microsoft has taken down a service called EvilTokens that used artificial intelligence to turn stolen email accounts into tools for payment fraud. The platform, which cost $1,500 to join and $500 per month, targeted Microsoft accounts of 12,000 customers across 10,000 organizations. EvilTokens used AI to analyze stolen inboxes and identify trusted contacts, payment processes, and job roles. It then created phishing emails and fraudulent pages designed to trick users into entering device codes that granted attackers access to their accounts. Microsoft and the United Kingdom's Metropolitan Police Service seized 50 websites and 150 domains, arresting two men for their roles in the operation. EvilTokens' AI chatbot identified key employees, managers, vendors, and customers, helping attackers craft believable requests to change payment information or approve unusual transactions. The compromised accounts were primarily in the United States, followed by Canada, the United Kingdom, Australia, India, and France. Microsoft advises organizations to verify requests through separate channels and emphasizes the importance of strong identity protections and monitoring after a mailbox compromise.",
  "summary": "The service, marketed through a Telegram channel, combined device-code phishing with automated analysis of stolen inboxes. Microsoft said it has now disrupted the operation, seizing 50 websites and 150 additional domains through legal action and partner coordination. The Metropolitan Police Service in the United Kingdom also arrested two men on... Read Entire Article",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}