Microsoft Dismantles EvilTokens Scam Network Targeting Enterprise Accounts

By Dan Goodin · Ars Technica · 2026-09-22

Ars Technica reports that Microsoft spearheaded an industry-wide effort to shut down a subscription-based fraud platform responsible for breaching 12,000 accounts across 10,000 global organizations. The service, known as EvilTokens, utilized specialized AI chatbots to automate th

Ars Technica reports that Microsoft spearheaded an industry-wide effort to shut down a subscription-based fraud platform responsible for breaching 12,000 accounts across 10,000 global organizations. The service, known as EvilTokens, utilized specialized AI chatbots to automate th