#2
BleepingComputer
general
September 22, 2026 at 15:00 UTC
EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts
By Bill Toulas
AI Summary
Microsoft's Digital Crimes Unit disrupted EvilTokens, a phishing-as-a-service platform that compromised over 12,000 Microsoft 365 accounts across 10,000+ organizations. The operation — coordinated with Health-ISAC, Cloudflare, Coinbase, OpenAI, and others under a U.S. District Court order — seized 50 websites and disabled 150+ domains. EvilTokens used AI throughout its attack chain and was available on Telegram for a $1,500 initiation fee plus $500/month, with two UK arrests made.
Relevance score: 91.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →