Microsoft disrupts AI-assisted scam platform that compromised 12,000 accounts

Microsoft announced Tuesday that it led an industry-wide effort to disrupt EvilTokens, a subscription-based scam platform that utilized artificial intelligence to compromise at least 12,000 Microsoft accounts over a span of a few months.

The platform, introduced via a Telegram channel in February, charged an initial fee of $1,500 and a recurring monthly charge of $500. EvilTokens streamlined the process for compromising email accounts in large numbers. It assisted users in analyzing inboxes, identifying targets with the highest potential payouts, and drafting convincing follow-up emails designed to trick company employees into transferring funds to attacker-controlled accounts.

"At the core of the service was an AI-style chatbot that could analyze a victim’s inbox and help criminals identify trusted relationships, payment authorizations, and sensitive responsibilities, as well as other circumstances where fraud was most likely to succeed," Microsoft stated. The platform could also recommend fraud strategies and draft messages impersonating trusted contacts to pressure victims into taking immediate action.

This operation marks a significant example of how AI is being exploited by cybercriminals for sophisticated phishing and financial fraud schemes. Microsoft's action highlights the ongoing battle between cybersecurity firms and malicious actors leveraging advanced technology.