AI Reports · Microsoft · 2026-09-22 · Blog / commentary
Disrupting EvilTokens: The AI Chatbot Built for Cybercrime

Microsoft, Health-ISAC, industry partners and law enforcement disrupted EvilTokens, a cybercrime platform that used AI at every stage of an attack, from compromising email accounts to planning fraud. Its chatbot analyzed victims' inboxes to find trusted relationships and payment authorizations, and it could draft messages impersonating trusted contacts. Within months of its February 2026 launch, the service had been linked to more than 12,000 compromised inboxes across over 10,000 organizations.