Summary
Microsoft said EvilTokens used AI to analyse victims’ inboxes, select impersonation targets and design fraud strategies. The company attributed more than 12,000 compromised inboxes across 10,000 organisations to the service.
Why it matters
AI is moving beyond phishing-content generation into target selection and post-compromise fraud automation.
Related coverage
- Twenty-one countries call for mandatory frontier-AI testing
- OpenAI publishes principles for independent model safety assessments
- OpenAI extends Daybreak cyber-defence access to Ukraine