Microsoft Dismantles EvilTokens Platform Behind 12,000 Account Compromises
Microsoft has taken down EvilTokens, an AI-assisted cybercrime platform that enabled threat actors to carry out mass compromises with unprecedented efficiency. The platform offered what investigators describe as an end-to-end solution, streamlining the entire attack workflow from credential harvesting to account takeover.
Security researchers note that EvilTokens represented a concerning escalation in the commoditization of cyberattacks. By leveraging artificial intelligence, the platform automated tasks that previously required significant technical expertise, lowering the barrier of entry for less sophisticated attackers. This automation allowed threat actors to scale their operations dramatically.
The disruption highlights the growing trend of AI being integrated into criminal tooling, enabling more sophisticated and widespread attacks. Microsoft stated that the platform had already been used to compromise approximately 12,000 accounts before its removal. The company's Digital Crimes Unit worked to dismantle the infrastructure supporting the operation, signaling continued enforcement efforts against AI-enabled cybercrime services.