Microsoft dismantles ai-driven cybercrime platform

Microsoft has dismantled the digital infrastructure of EvilTokens, an AI-powered cybercrime platform used by hackers to commit fraud. The company obtained a court order from the U.S. District Court for the Eastern District of Virginia to take down the platform, which was used to compromise over 12,000 email inboxes across 10,000 organizations. The breach affected sectors including construction, financial services, real estate, higher education, and healthcare. EvilTokens operated as a subscription service, charging hackers a $1,500 initiation fee and $500 monthly. The platform, which launched in February 2026, used device-code phishing to compromise Microsoft accounts. Microsoft emphasized that AI tools are enabling financially motivated hackers to scale their attacks and lower the barrier for less-skilled attackers. Law enforcement is also investigating the platform.