Microsoft disrupts AI-assisted platform behind 12,000 compromised accounts

Microsoft has announced that it disrupted a platform called EvilTokens, which was used to compromise user accounts. According to the company, the service was tied to the compromise of roughly 12,000 accounts.

EvilTokens is described as an end-to-end offering: rather than a collection of scattered utilities, it gave attackers a complete toolkit that made mass compromises faster and easier. The effect is to lower the barrier to entry for would-be intruders.

What set the platform apart was its use of artificial intelligence, which — by the account of the description — sped up and streamlined the process of taking over accounts. It fits a broader pattern in which tools built to boost productivity also find a home in the cybercriminal world.

The brief report does not spell out exactly how Microsoft disrupted the service or who was behind it.

Source: Ars Technica