Microsoft and UK police disrupt EvilTokens, an AI-powered scheme that hit 12,000+ inboxes
TechNadu · x · 2026-09-23
- Threat actor EvilTokens compromised 12,000+ inboxes across 10,000+ organizations.
- After gaining Microsoft Office access, its AI analyzed emails to spot wire-transfer discussions and recommend which employees to impersonate for business email compromise.
- Microsoft and U.K. police have now disrupted the operation.
A notable case of attackers weaponizing AI for highly targeted, automated fraud — a warning for enterprise email and payment-approval workflows.
Related event: Microsoft and UK Police Dismantle EvilTokens AI Phishing Operation(2 posts)→
More from Safety
- LMArena co-founder explains AI evaluation methodology and policy in new podcast — MattPerault · 2026-11-11
- Defending METR: public data can't second-guess its AI speedup findings — peterwildeford · 2026-11-11
- Australia's review of an OpenAI agent's unauthorized Medicare access exposes the agent accountability problem — cmb24k · 2026-11-11
- Adversarial RL envs for backdoor insertion vs. detection: where does it converge? — DimitrisPapail · 2026-11-11
- Using a third-party inference provider with your coding harness hands it shell access to your machine — TheZachMueller · 2026-11-11
- Democrats propose requiring federal permission to train AI models, with up to 20 years in prison — Polymarket · 2026-11-11