Microsoft disrupts AI-powered EvilTokens cybercrime platform, seizes 50 websites
MSFT•UK arrests and fraud risk highlighted
UK Metropolitan Police arrested two men on Sept. 11, 2026 on suspicion of offenses linked to the alleged operation.
The case highlights faster fraud risk once inboxes are breached, with AI rapidly mapping relationships, payment workflows and targets for impersonation.
Microsoft disrupts EvilTokens cybercrime platform
Microsoft disrupted EvilTokens, an AI-driven cybercrime service tied to more than 12,000 compromised email inboxes since February 2026.
The operation seized 50 websites and disabled more than 150 domains, targeting infrastructure used for email-based financial fraud and scams.
