Technology
Microsoft and partners dismantle AI cybercrime service EvilTokens after widespread compromises
The subscription platform breached over 12,000 accounts across 10,000 organizations before coordinated action and arrests.
The short version
- Microsoft led an industry-wide operation dismantling EvilTokens, an automated, subscription-based cybercrime platform launched in February.[Ars Technica]
- The service used artificial intelligence to breach more than 12,000 inboxes across over 10,000 organizations worldwide.[Ars Technica · Slashdot]
- Following intelligence shared by Microsoft, United Kingdom police arrested two suspects, aged 32 and 38, on September 11, 2026.[Slashdot]
Key facts
- Microsoft led a coordinated industry disruption of EvilTokens, a cybercrime platform that used an AI chatbot to compromise 12,000 accounts.[Ars Technica]
- EvilTokens launched via Telegram in February, charging an initial $1,500 fee alongside a $500 monthly subscription.[Ars Technica]
- The platform compromised more than 12,000 inboxes spanning more than 10,000 organizations globally.[Slashdot]
- UK Metropolitan Police officers arrested two men, aged 32 and 38, on September 11, 2026, using intelligence from Microsoft.[Slashdot]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.