Executive Summary
Microsoft disrupted EvilTokens, a phishing platform that used AI at every step, including writing lures and choosing targets.
What Happened
The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets. The post AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft appeared first on SecurityWeek .
Affected Products
- Microsoft 365
Vulnerability / Attack Technique
AI-powered phishing platform
Technical Mechanism
AI automated message writing and targeting.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
Phishing operations are being fully automated with AI. RealGround analysis: content-based phishing detection is weakening; rely on phishing-resistant MFA.
Recommended Controls
- Use phishing-resistant MFA
- Restrict device code flow
Related RealGround Service
AI CISO Advisory · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/ai-powered-phishing-platform-eviltokens-disrupted-by-microsoft/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.