ConciseSignal
CybersecuritySingle source

Microsoft dismantles AI-driven EvilTokens cybercrime platform

Microsoft and partners have taken down EvilTokens, an AI-powered cybercrime platform allegedly used by about 1,000 cybercriminals to compromise over 12,000 Microsoft user email inboxes worldwide. On September 15, Microsoft seized 50 EvilTokens-operated websites and disabled more than 175 related domains. Authorities have arrested two suspects in London accused of fraud and money laundering linked to the platform. At least $1.7 million in losses are tied to EvilTokens.

Why it mattersThis operation exposed the increasing use of AI in sophisticated cybercrime. Organizations with compromised email accounts may face ongoing risks even after infrastructure takedown.

Sources covering this

The RegisterHeadline onlyUK Cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites3:00 PM →FortuneHeadline onlyMicrosoft and Coinbase probe leads to arrest of crooks behind ‘EvilTokens’, a DIY phishing network powered by AI3:00 PM →CyberScoopMicrosoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud3:00 PM →The RecordHeadline onlyTwo arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals3:51 PM →

In this story

Microsoft
Concise Signal DailyEverything that mattered, every weekday at 7am.

More in Cybersecurity

11 sources · 4d ago

Security startup Hacktron exploits vulnerability in OpenAI forum

Hacktron, an AI cybersecurity startup, found and exploited a security flaw in OpenAI's community forum that allowed access to an employee's internal account using Anthropic's Claude. The breach relied on an image processing vulnerability and was executed in less than 72 hours. Hacktron stopped short of accessing internal code and reported the issue to OpenAI, which then revoked affected tokens. Hacktron received a $6,500 bounty for the discovery.

14 sources · 14d ago

Microsoft releases record number of security patches

Microsoft released updates to fix at least 974 security vulnerabilities across Windows and other products, its largest patch release to date. The update includes critical flaws, some already being exploited, and over 100 rated as dangers that could let attackers seize control of systems. The unprecedented volume is partly due to the use of AI for vulnerability detection, but experts warn that rapid growth complicates efforts to test and deploy fixes.

9 sources · 8d ago

Microsoft releases record September patch for Windows

Microsoft issued its largest-ever security update for Windows, addressing over 960 vulnerabilities in its September release. More than 100 of these flaws are rated critical, and at least two are actively exploited. Several issues from previous updates, including failures in Microsoft Teams and Outlook on ARM devices, have been resolved. The volume of fixes is part of an industry-wide trend linked to increased use of AI for identifying software vulnerabilities.

7 sources · 16d ago

OpenAI pledges $1 billion for AI cyber defense program

OpenAI has pledged $1 billion in credits to help organizations defending critical U.S. infrastructure—including water utilities, electric grids, local governments, banks, and nonprofits—access its AI-powered cybersecurity tools, training, and support. The "Daybreak for Frontline Defenders" initiative aims to help these sectors strengthen their defenses as AI-driven cyberattacks become more advanced. OpenAI says it will expand the program to partner countries in the coming weeks.