Microsoft dismantles AI-powered phishing service that hit 12,000 accounts across 10,000 firms

Microsoft has shut down EvilTokens, a subscription-based cybercriminal service that compromised more than 12,000 email accounts across roughly 10,000 organizations worldwide. The platform used advanced AI tools to automate hacking tasks and craft convincing phishing messages by analyzing victims' own emails. Microsoft also seized several domains linked to the operation as part of its takedown effort. UK law enforcement subsequently arrested two individuals suspected of involvement in running the scheme. The case highlights a growing threat from AI-assisted cybercrime tools that businesses are being urged to address as a matter of urgency.