Microsoft led an industry-wide disruption of EvilTokens, a subscription-based AI scam platform that compromised 12,000 Microsoft accounts across 10,000 organizations in multiple countries. The platform used an AI chatbot to analyze victim inboxes, identify high-value targets, and draft convincing phishing emails impersonating trusted contacts to facilitate financial fraud.
Background
AI-powered social engineering attacks have become increasingly sophisticated, with threat actors leveraging large language models to automate and scale phishing operations.
- Source
- Ars Technica
- Published
- Sep 23, 2026 at 03:45 AM
- Score
- 7.0 / 10