How to Prevent EvilTokens Artificial Intelligence Service?

Microsoft announced the collapse of EvilTokens artificial intelligence in September 22, 2026. The service revealed in February 2026 was used to address more than 12.000 email accounts in over 10,000 institutions. What distinguishes EvilTokens from the previous ones was that the attack of artificial intelligence was placed in every stage. In this article, how the service works, how the operation is carried out and what measures the institutions can take.

What is EvilTokens And How Much Does Subscription Fee?

EvilTokens was released in February 2026 as a subscriber service (phishing-as-a-service). According to the news published in SecurityWeek The service was used in the field of over 10,000 e-mail accounts. They are mainly located in USA, Canada, UK, Australia, India and France. 44 different themes were offered for users for fake email and login pages.

Sales was done via Telegram. 1.500$ entry fee to join the service, then paid $500 per month subscription. Based on quartz transferring Coinbase, who participated in the investigation, found that the platform has reached about 1,1 million dollars. There are institutions of wholesale distribution, construction, finance, real estate, high education and health sectors among the victims.

How Does Device Code Work?

The basic weapon of EvilTokens was the device code. A legitimate input method designed to connect devices such as device code flow, non- keyboard television or printer to Microsoft account. Saldurgan translates this flow in favor.

According to the technical analysis published in The Hacker News The process works in three steps:

Salt: A device code is shown with the e-mail of victimization and this code is asked to enter.

Approval: The victim code enters the real Microsoft, such as microsoft.com/devicelogin, not a fake site.

Thread: The authentication server gives access and renewal tokens to the app of the attacker. Saldurgan thus gaining permanent access with the identity of the victim.

The method makes it dangerous, does not encounter a fake address at any stage of the victim. Multi-factor authentication (MFA) as the password is not stolen. Saldurgan Microsoft 365 is able to enter quietly as victims.

Which Roles Are In Artificial Intelligence Attack Chain?

In the center of the service, there was a chat boat that analyzes the corresponding boxes. According to the official description of Microsoft The boat identified reliable relations between emails, payment authorizations and sensitive responsibilities. Then she proposes the most grip scenarios of scammerity, prepared message drafts that mimic trusted contacts.

Microsoft summarizes this situation as follows: artificial intelligence not only write more convinient messages. He also decided that who will take the goal, who will be imitation and how to exploit the most money of the relationship.

The ironic side of the business is that the platform itself is produced with artificial intelligence. The inspectors found that the large part of EvilTokens was developed by printing code to the artificial intelligence. The service also appeared from the capabilities of multiple artificial intelligence models.

Ethical filters removal Tags harmful artificial intelligence models Home was used in the world of crime for some time. The difference of EvilTokens is to combine these capabilities in one ready interface with account capture, incoming box analysis and fraud preparation. The work that requires separate experience in identity attacks, cloud systems and financial fraud has become accessible with one subscription.

Microsoft Operation How to Start?

The Digital Crimes Unit of Microsoft for operation allowed from the US Virginia East Regional Court. According to Axios's news 50 websites where the service was processed and over 150 domains were disabled. The cybersecurity organization of the health sector has joined Health-ISAC as a joint caseer.

On the technical side, Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver Foundation and TRM Labs supported. Steven Masada, from Microsoft, explained the ground of the work union as follows:

"EvilTokens was not able to stop a single organization. Service was reusing resources such as hosting providers, cloud services, artificial intelligence tools and financial services." Steven Masada, Microsoft Digital Crimes Unit (Help Net Security)

The physical foot of the operation took place in London. Based on The Record The cybercrime team of London Safetyi arrested two people with 32 and 38 years old in September 11, 2026. Crimes directed to doubts, produce the tool to be used in fraud and bypass black money. Two suspects were released with conditional kefalet. Microsoft thinks there may be other people who support the service in different roles.

According to Microsoft, this is the 40th operation performed by the court decision of the Digital Crime Unit in about 20 years. End-to-end artificial intelligence is the first operation for a criminal service. The unit had previously targeted platforms such as RaccoonO365 and RedVDS.

What Are the Differences Between EvilTokens And Classic Kits?

Oltalama kits are not new. Microsoft April 2026 Tycoon2FA service crashed in 330 domains. But EvilTokens also automates fraud planning after access with the technical part of the attack. Differences are summarized in the following table:

The last two lines on the table show where the threat is married. The skill of the attack is no longer decisive, because he incorporates skills to the subscriber. Several days ago from agenda BragJack scanner AI Attack When targeting agent sessions, EvilTokens places artificial intelligence to the next side of the attacker. Two cases, AI security reveals two faces of discussion.

What Do Institutions Do Against Device Code Risks?

EvilTokens infrastructure collapsed, but the method was not eliminated. According to the news published in BleepingComputer clones like APToken of the service appeared now. The first two steps recommended in the same news can be added more than two applications in the industry:

Close device code flow: If it does not really need in the institution, the authentication with the device code should be disabled, it should be blocked anywhere possible.

Confirm the app: Users have to check which application inputs on the screen they enter code. When an unforeseen application is seen, the transaction should be stopped.

Watch Jeton movements: Access and renewal tokens given to unknown clients should be followed with unusual login records.

Split the payment processes: Invoice and payment instructions should be confirmed by a second channel outside the email. The main goal of EvilTokens was these processes.

The issue for institutions in Turkey is not only technical. A corresponding box can mean leakage of customer and employee data. In such an event KVKK and AI Data responsibility obligations discussed under the header are also activated.

In the table, The Register said The institutions made the following warning:

"When an incoming box is captured, the contents of the criminals should not understand in minutes, not in days." Steven Masada, Microsoft

This phrase means that incident intervention times should be recalculated. If artificial intelligence can sum up in minutes of a incoming box, it works in favor of each hour attacker passing to notice the breach.

Frequently Asked Questions

What is EvilTokens?

EvilTokens is an artificial intelligence-supporting service that appeared in February 2026 and sold with subscription via Telegram. The service handles Microsoft 365 accounts with device code input and suggests fraud scenario by analyzing the boxes from a chat boat. Microsoft announced its service crashes on 22 September 2026.

How to bypass MFA of device code?

The MFA stage does not take into account the attacker because the device has not been stolen in the code. The victim confirms the code sent by the attacker into the actual Microsoft entry page and with its own identity. The server also delivers access tokens directly to the app of the attacker.

How many accounts did EvilTokens deal?

According to the description of Microsoft, the service was used to address more than 12,000 email accounts in over 10,000 institutions. According to Coinbase’s detection, the platform has reached about 1,1 million dollars.

Are they caught behind EvilTokens?

In London, 11 September 2026, 32 and 38 years old were arrested and released with kefaletle. The investigation continues. Microsoft also states that there may be other people who support the service.

How to protect an institution from device code attacks?

The first step is to close the authentication with the device code anywhere that is not needed. Users should check what they are connected to when entering the code, security teams should also monitor tokens given to clients that are not recognized. Confirmation of payment instructions with a second channel outside the email also prevents fraud stage.

The operation of Microsoft closed an infrastructure, but the artificial intelligence-supported crime model that is sold with the subscription may not last long. The emergence of clones like APToken shows that the defending side should also adapt to the same speed. The question you need to question is which the next service will target the legitimate input method instead of the device code.