Stories
EvilTokens AI Scam Platform Hacking 12,000 Accounts Shut Down by Microsoft
F
Firstpost•24-09-2026, 10:59
EvilTokens AI Scam Platform Hacking 12,000 Accounts Shut Down by Microsoft
- •Microsoft has announced the disruption of EvilTokens, an AI-powered cybercrime platform that provided account takeover services.
- •The platform, which charged a monthly fee, used an AI chatbot to assist attackers in selecting victims and exploiting compromised accounts.
- •EvilTokens exploited Microsoft's device-code authentication system, enabling attackers to gain control of over 12,000 accounts.
- •The AI's advanced capabilities allowed attackers to analyze victim inboxes, identify influential contacts, and generate tailored fraud attempts.
- •The operation affected victims in six countries, and Microsoft collaborated with law enforcement to dismantle the infrastructure and make arrests.
Key Questions Answered
EvilTokens was an AI-powered scam platform on Telegram that turned account takeovers into a subscription service. Customers paid an initial access fee of $1,500 along with a monthly fee of $500 to use the tool.
The platform utilized Microsoft's legitimate device-code authentication system by directing victims via malicious emails to attacker-controlled pages. Automated scripts then generated device codes that victims were tricked into entering on genuine login pages.
Microsoft collaborated with partners to take down 50 websites and disable over 150 domains supporting the infrastructure. Additionally, the Metropolitan Police Service's cybercrime team in the UK arrested two men on suspicion of connected offenses.
