Microsoft, Partners Disrupt EvilTokens AI Phishing Service After 12,000 Inbox Compromises

Microsoft and its partners have disrupted EvilTokens, an AI-enabled phishing-as-a-service operation that helped attackers turn compromised corporate inboxes into business email compromise playbooks. The Sept. 22 action cut off key infrastructure for a service Microsoft says reached more than 12,000 inboxes across 10,000 organizations.