AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft

Summary

Microsoft has announced the disruption of EvilTokens, an AI-powered phishing platform that emerged in February 2026. The platform compromised over 12,000 email accounts at more than 10,000 organizations globally, using AI for social engineering, target selection, and data exfiltration. Two suspects have been arrested in the UK as part of the takedown.

Full text

Microsoft announced on Tuesday that it disrupted EvilTokens, an AI-powered phishing platform used by cybercriminals to target many organizations worldwide. EvilTokens emerged in February 2026, and according to Microsoft, it has been used to compromise more than 12,000 email accounts at over 10,000 organizations, including in the US, Canada, the UK, Australia, India, and France. The platform enabled threat actors to gain access to targeted accounts via device code phishing, which targets the device code authentication flow designed for devices that don’t support standard login methods, such as TVs and printers. The authentication process requires the user to enter a short code presented on the device into a web browser session on a separate device. Threat actors can abuse this by initiating the authentication flow and providing the code to the targeted user via a phishing lure. If the user is convinced to complete the authentication process in a browser using the attacker’s code, they are giving the attacker access to the account without handing over passwords. EvilTokens facilitated this process, making it easier for cybercriminals to obtain access tokens that could provide persistent access to email accounts. The platform used AI throughout the attack chain, including to create phishing emails customized for specific targets to increase the chances of success. EvilTokens offered 44 different themes for the malicious emails and phishing pages.Advertisement. Scroll to continue reading. Once access was gained to an account, AI helped EvilTokens users go through victims’ inboxes for valuable data. “[AI] helped them decide who to target, who to impersonate, and how to most effectively exploit the relationship to extract as much money as possible,” Microsoft said. Microsoft believes the platform itself was also coded using AI. To access and use EvilTokens, cybercriminals had to pay $1,500 for initial access and a $500 monthly fee. Microsoft seized 50 websites used to run the service and disabled more than 150 other domains linked to the platform’s infrastructure. In addition to the technical disruption, Microsoft announced that two men suspected of being linked to the operation of EvilTokens — Felix Utomi and Waidi Segun Adams — have been arrested in the United Kingdom. Microsoft named the suspects in a complaint filed as part of its efforts against the phishing platform. The complaint also targets five unnamed individuals. SpyCloud, TRM Labs, Coinbase, Health-ISAC, Cloudflare, OpenAI, Railway, and The Shadowserver Foundation also contributed to the EvilTokens takedown. Related: 15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown Related: NightmareStresser DDoS Service Disrupted in International Operation Related: 23-Year-Old Sality P2P Botnet Disrupted Related: GlassWorm Botnet Disrupted Written By Eduard Kovacs Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering. Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from Eduard Kovacs Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing IdentityOnly 13% of OT Network Segments Are Fully Isolated: AnalysisJapan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider SchemeDragos Completes NetRise and runZero Acquisitions Following Accenture DealRust Team Members and Popular Crate Owners Targeted via Video CallsColorado Water Utilities Hit by Cyberattacks Targeting OT SystemsGoogle Confirms Gemini AI Breached Three FirmsAI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code Latest News Adobe Patches Critical Flaws in Connect, AEM FormsChrome 154 Patches 108 VulnerabilitiesA Look at AI Doomsday Scenarios That Researchers Say Could Put Humanity at RiskOuterlimit Raises $16 Million to Stop Rogue AI Agents From Causing HarmArista Urges Immediate Patching of Exploited VCO Zero-DayCritical F5 BIG-IP Vulnerability Exploited as Zero-DayShinyHunters Claims FBI Hack, Demands Retraction of Threat ReportCheck Point Patches Exploited Management Server Zero-Day Trending Daily Briefing NewsletterSubscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Virtual Event: Attack Surface Management Summit 2026 September 16, 2026 Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs. Register Webinar: Building Continuous Authorization at Scale September 23, 2026 Explore what it takes to operationalize continuous authorization at scale, including the technical, organizational, and cultural changes required. Register People on the MoveGwen Gann has become State Chief Information Security Officer for the State of Washington at WaTech.Pietr Lindahal has been named Vice President and Chief Information Security Officer at Boston Scientific.AI agent identity and enforcement company FIOR has appointed Gemma Ungoed-Thomas as Adviser.More People On The MoveExpert Insights “We Think the Security Control Is Working” Is No Longer Good Enough Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. (Sravish Sridhar) This Key Will Self-Destruct: An Open Standard for Revocable API Keys Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default. (Matt Honea) What the Hugging Face Incident Teaches Security Leaders About AI Agent Access Security teams must treat autonomous agents as highly privileged identities. (Etay Maor) The Future of AI-Driven Security Depends on Complete Data For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality. (Danelle Au) The MFA Identity Trap: When Authentication Creates a False Sense of Security Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop. (Torsten George) Flipboard Reddit Whatsapp Whatsapp Email

Entities