Microsoft combats ai-driven scam platform linked to 12,000 compromised accounts

Microsoft announced on Tuesday that it spearheaded an industry-wide effort to dismantle EvilTokens, a subscription-based platform used by cybercriminals to compromise 12,000 Microsoft accounts over several months. The platform, introduced in February via a Telegram channel, charged an initial $1,500 fee and a monthly $500 recurring fee. It streamlined the process of breaching email accounts, enabling users to analyze inboxes, identify high-value targets, and draft convincing phishing emails. Microsoft highlighted that the platform featured an AI-style chatbot capable of analyzing victims' inboxes to detect trusted relationships, payment authorizations, and other fraud opportunities. The chatbot also recommended strategies for criminals, including crafting messages that impersonated trusted contacts to manipulate victims into transferring funds. The disruption marks a significant step in combating AI-enabled cybercrime.