#device-code-phishing
2 cases
EvilTokens: Microsoft's DCU dismantles an AI-chatbot phishing service that hit 12,000 inboxesAI & Machine LearningFinancial Fraud
Microsoft's Digital Crimes Unit seized 50 sites and 150+ domains behind EvilTokens, a cybercrime-as-a-service platform pairing device-code phishing with an AI chatbot for inbox analysis and BEC targeting. It hit 12,000+ inboxes across 10,000+ orgs. The AI did the targeting, not the intrusion.
AI & Machine LearningFinancial Fraud
GTG-20006: The Russian Espionage Crew That Used Claude to Rebuild Its Malware Every Time It Was CaughtState-SponsoredAI & Machine Learning
Anthropic's September threat report describes a Midnight Blizzard-linked operator running eight AI workflows — phishing, hotel Wi-Fi hijack, malware evasion — against 24 targets in Ukraine and Europe. Microsoft's CaptiveCrunch report, from the other side, lists four of the same domains.
State-SponsoredAI & Machine Learning