Criminal operators lost access to a paid, AI-assisted fraud platform after Microsoft said it led an industry disruption of EvilTokens, a service used to compromise 12,000 Microsoft accounts over a span of months. The action removes a central tool that criminal customers used to scale email account takeovers and related fraud.
EvilTokens first appeared on a Telegram channel in February and sold access behind a subscription model, charging an initial $1,500 and $500 each month. Rather than marketing one-off exploits, the platform bundled multiple steps attackers normally perform separately, accelerating the work needed to harvest and exploit inbox access at scale.
Microsoft described the service’s core feature as an AI-style chatbot that guided abuse. "While EvilTokens helped cybercriminals access email accounts, at the center of the service was an AI-style chatbot that could analyze a victim’s inbox and help criminals identify trusted relationships, payment authorizations, and sensitive responsibilities, as well as other circumstances where fraud was most likely to succeed," Microsoft said. "The platform could even recommend fraud strategies, including drafting messages that impersonated trusted contacts to help criminals trick victims into taking action."
Beyond automated analysis, the service also helped subscribers choose targets with the largest payout potential and produced realistic follow-up messages designed to persuade employees contacts to transfer funds to attacker-controlled accounts. In practice, EvilTokens turned social-engineering workflows into a repeatable, subscription-based product that reduced the expertise and time required to run large-scale campaigns.
Microsoft presented the disruption as an industry effort intended to cut off a commercial service that lowered the barrier to sophisticated email fraud. With the platform disabled, the immediate risk tied to EvilTokens should decline, but the episode highlights how subscription models combined with generative tools can make complex deception accessible to a broader range of offenders. What follows is whether similar criminal infrastructure will resurface under new brands or migrate to other automation tools.
