Microsoft disrupts AI-assisted platform that compromised 12,000 accounts

Microsoft has dismantled a cybercriminal operation known as EvilTokens that provided automated tools for stealing authentication cookies from users. By intercepting these session tokens, the platform bypassed multi-factor authentication to compromise approximately 12,000 accounts. This action disrupts a service specifically designed to lower the technical barrier for large-scale account takeovers.