A joint operation between Microsoft, Coinbase, and law enforcement agencies has dismantled EvilTokens, an AI-powered phishing-as-a-service platform that compromised over 12,000 email inboxes across more than 10,000 organizations in 79 countries. Investigators traced approximately $1.1 million in illicit revenue flowing through four Tron addresses and over 700 distinct deposit addresses. Two suspects aged 32 and 38 were arrested in London on September 11, 2026, and later released on bail. The operation also led to the seizure of 50 websites and the disabling of over 150 domains associated with the platform, which charged $1,500 upfront plus $500 monthly to approximately 1,000 criminal clients.
Source: Read the original article
