Microsoft disrupts AI-assisted EvilTokens cybercrime service
Microsoft says it disrupted EvilTokens, an AI-assisted service used to analyse stolen email accounts and plan financial fraud. With partners, it seized 50 operating websites and disabled more than 150 related domains. The case highlights that resetting a password may not end an attacker’s session; organisations should review tokens, payment controls and suspicious mailbox access.