EvilTokens abused Microsoft’s real device-login flow to authorize attacker sessions, then used AI to identify payment authorities inside captured mailboxes.
CryptoSlate•Oluwapelumi Adejumo9h ago
The dismantling of EvilTokens highlights the growing importance of public-private partnerships in combating sophisticated cybercrime networks globally.
CryptoBriefing•Editorial Team19h ago
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
Ars Technica•Dan Goodin23h ago
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver
The dismantling of EvilTokens highlights the critical need for collaborative cybersecurity efforts to combat sophisticated phishing threats globally.
CryptoBriefing•Editorial Team22 Sept
The scam involved selling phishing kits on social media that let anyone create convincing fake emails.
The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft's Digital Crimes Unit (DCU). [...]