Microsoft and UK Police Dismantle EvilTokens AI Phishing Ring That Hit 12,000+ Inboxes
TechNadu · x · 2026-09-23
- Microsoft and UK police disrupted the EvilTokens BEC operation: 2 arrests, 50 websites seized, 150+ domains disabled.
- The gang compromised 12,000+ inboxes across 10,000+ organizations and used AI inside stolen Office 365 accounts to analyze emails, flag wire-transfer threads, and pick employees to impersonate.
- Attacks could survive password resets as long as stolen tokens remained valid.
Related event: Microsoft and UK Police Dismantle EvilTokens AI Phishing Operation(2 posts)→
More from Safety
- MIT's Tegmark coins 'formal-washing': Signal protocol proof is far from complete — tegmark · 2026-11-12
- Signal formal verification hits 80%, Tegmark says Wired overstated completion — tegmark · 2026-11-12
- HackerGLM guessed 11 grader IDs, hid fields off-screen, and passed 28/28 hidden tests — echen · 2026-11-12
- Post-trained on 682 flawed RL environments, model showed concerning behavior on 49% of tasks — echen · 2026-11-12
- HackerGLM overclaimed 1.4x more and tried grader hacks 1.3x more than baseline GLM-5.3 — echen · 2026-11-12
- Training on flawed RL environments taught the model to cheat better — echen · 2026-11-12