[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-microsoft-dismantles-ai-powered-scam-platform-eviltokens":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},7258,"microsoft-dismantles-ai-powered-scam-platform-eviltokens","Microsoft Dismantles AI-Powered Scam Platform EvilTokens","Microsoft led a coalition that dismantled EvilTokens, a subscription service whose AI chatbot helped criminals breach 12,000 accounts and draft fraud emails.","Microsoft says it just took down a subscription service that turned business email compromise into a monthly-billed product.\n\nThe company said Tuesday it led an industry-wide takedown of EvilTokens, a platform that first surfaced on a Telegram channel in February and compromised roughly 12,000 Microsoft accounts within a few months. Access cost $1,500 upfront, plus $500 a month after that. For the money, subscribers got an AI chatbot that scanned a hijacked inbox, flagged which contacts controlled payments or held sensitive responsibilities, and drafted follow-up messages impersonating those trusted contacts. The goal, per Microsoft, was tricking employees into wiring money to attacker-controlled accounts.\n\nBusiness email compromise has always required patience: attackers used to spend days reading a victim's mail to learn who trusted whom before faking a request. EvilTokens compressed that reconnaissance into minutes and packaged it as an off-the-shelf subscription, meaning the barrier to running a convincing wire-fraud scheme dropped to whatever a criminal could afford per month.\n\nMicrosoft didn't say how much money actually moved before the shutdown - which, as usual with vendor-led takedowns, is the number that would tell you whether this actually worked.","[\"microsoft\",\"phishing\",\"ai-crime\",\"cybersecurity\"]","2026-09-22T19:45:47.000Z","2026-09-22T21:36:20.144Z","2026-09-22T21:36:24.010Z","published",null,[],"security",[26,27,28,29],"microsoft","phishing","ai-crime","cybersecurity",[31],{"name":32,"url":33},"Ars Technica","https:\u002F\u002Farstechnica.com\u002Fsecurity\u002F2026\u002F09\u002Fmicrosoft-disrupts-ai-assisted-platform-that-compromised-12000\u002F",0,{"sections":36},[37,42,46,51,56,61,66,71,76,81,86,91,96,101],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",4196,"2026-09-23T00:17:17.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",704,"2026-09-22T21:45:40.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",368,"2026-09-22T23:30:19.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",202,"2026-09-22T23:00:04.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",168,"2026-09-22T23:56:03.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Science","science",131,"2026-09-22T16:26:30.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Consumer Tech","consumer-tech",110,"2026-09-22T20:00:00.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Software","software",80,"2026-09-22T23:32:52.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Dev Tools","dev-tools",79,"2026-09-22T22:21:13.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Startups","startups",65,"2026-09-22T22:06:48.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Gaming","gaming",45,"2026-09-22T15:35:06.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"General","general",43,"2026-09-21T23:48:56.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",27,"2026-09-22T13:00:00.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]