Microsoft disrupts AI-powered EvilTokens cybercrime platform, seizes 50 websites

• Microsoft disrupted EvilTokens, an AI-driven cybercrime service tied to more than 12,000 compromised email inboxes since February 2026.
• Operation seized 50 websites, disabled more than 150 domains, targeting infrastructure used for email-based financial fraud and scams.
• UK Metropolitan Police arrested two men on Sept. 11, 2026 on suspicion of offenses linked to the alleged operation.
• Case highlights faster fraud risk once inboxes are breached, with AI rapidly mapping relationships, payment workflows, targets for impersonation.

Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. Microsoft Corporation published the original content used to generate this news brief on September 22, 2026, and is solely responsible for the information contained therein.