# Microsoft disrupts AI-assisted platform that compromised 12,000

> **Newsylist Open Intelligence Dossier** · First detected: 2026-09-22 21:29 UTC · Category: Business · Sources: 8 · Current Velocity: 5.66

## Key People, Organizations & Locations
Microsoft, AI-assisted

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| The Register | UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites | 2026-09-22 19:45 | [Source Link](https://news.google.com/rss/articles/CBMizwFBVV95cUxQbWtwTHN5bWFWU0VMTlhIV25vTEE4WHFiSzNNcmxGMDNuNUdjTk45LVlreW1DbkZESzh0RzhfMVdmWnBqbTVCXzFNRW01R25icXNFOG9waWZENDd5MHM5V0RzSmhzZFNBMi1CUUF6bWNYdS1TZTdSS2N3aTRnVlhXYlJxQzBmV195TWNNUlU4bEFxa19lTzhkRWVpbDFvb0kyc2pMWjY3alpuakEwN00tY2Y2Yk5JcmFMdk5FTWdxdF9JNURIZWJQZ2o1NXJWMlU?oc=5) |
| Axios | A major AI-powered phishing service has lost access to its key infrastructure | 2026-09-22 19:45 | [Source Link](https://news.google.com/rss/articles/CBMid0FVX3lxTE5WYThJTjdTdnlKYktoNExBNVBQTEg1RThSREJhbm10UzIxeDVSUFM4RjB3NS15NUhURFBoMWg4cmpaSi14WWNWN3lsbHpPVE5iVjdXSmlTQTNmakllWF9Ncm1UblgweFV4SlYwUmotVlVQS3E4Ukg0?oc=5) |
| Fortune | Microsoft and Coinbase probe leads to arrest of crooks behind 'EvilTokens', a DIY phishing network powered by AI | 2026-09-22 19:45 | [Source Link](https://news.google.com/rss/articles/CBMia0FVX3lxTE9xaWhBSmk5Y1RsQ0JJSERtcVNGMWhJbUdaRHBRUkFtdURZMDRaX0RpcTZrNlFzNVVReGxJa1pNNVpsMnNyaDNrTnllZkhTekdNbXFHOGhsQU1nY05yc0hlRVBOWENzby1sRlBV?oc=5) |
| The Hacker News | Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises | 2026-09-22 19:45 | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxQVXE4QTYyeEJ6ZjlYdlZUcHdrTEhVbjdQTWVfb0tINFBxWjBHRjBaM1hJMGh2dElBTS1HbzB2YlZXclNVaThPRlpMa0hHWGNMQ3pFVWJuMDhpc3dQUDBHM1RYWXVfR1lBXzV6RlpmNEg2eHF2a3B3eXlZTzRxb1d4WkpCYw?oc=5) |
| Coinbase | Consumer Protection Tuesday: Taking Down Evil Tokens | 2026-09-22 19:45 | [Source Link](https://news.google.com/rss/articles/CBMiY0FVX3lxTE1OUDZzVXF4U1RYX2hQNjFvLTNLdGxjSWdWUHNfUTFqT1c3WmlLWEtpQnlMUlgxaHZMUEQ0OWhYQkJyXzBWRFJrcEN6NHZVOHRjeGdQNEM5VE9Jb1cxSVB4R2Uydw?oc=5) |
| csoonline.com | Microsoft’s EvilTokens takedown sheds light on state of AI-powered cybercrime | 2026-09-22 19:45 | [Source Link](https://news.google.com/rss/articles/CBMiwAFBVV95cUxNemJpZ2VQR19oODhYcXd6Nl80YVFsUWx2dkZ5aVdwQW9VcG1iWjlaMV9lM3BING1RNHgxazhqREN3aE04X29BNHlHM1lQUnZPR0lZa2xVaE45ZVZGVmFMUU1tTTkzaEVxdmprUE9SaENOTGxqTWNUUkVFQ0dhQlg3VXZ2Z2hUSVN0Y2xtTWNqUFhoSEZDSFJoY3ZETFpLWVUzckVqNGhuczYwaHNubHNhWkIycXY2NnNpU3lLN0kyMF8?oc=5) |
| Microsoft | Unmasking EvilTokens: Getting to the root of device code phishing | 2026-09-22 19:45 | [Source Link](https://news.google.com/rss/articles/CBMivwFBVV95cUxQUW9ZTWZ1UDBMSHpaWjZnNFdaX25sNTNkSVgwNjc4WFpVN2xoWE9acG42OFUxdVNHNjc3bEZmYnAzdWc5ZVh2c1BPNkhWWk4zT2NtRkdOVEdFc0dIOUg3SXlhTmc5a3hmdzM0U00tdjdNcEMweVVDRTV6OGtMcW1BNnJTVHlCS2NVNXhGSF9neHNqeUFGMGNWVzhKNkRqOEhqM09ZaVFSRVVCSWdvQnlfMGxfNXlnZ1JVVEdNZVlnYw?oc=5) |
| Ars Technica | Microsoft disrupts AI-assisted platform that compromised 12,000 | 2026-09-22 19:45 | [Source Link](https://news.google.com/rss/articles/CBMipwFBVV95cUxQUmh3a3dqNVZjY3lzUGdaT3VhOUR2R3BSdncwVlZxZi1QNDJLTl80OGxLQk1SRGFyNDZwTGRWLXQwN2NCdWotRlJOMFo4cEQwR0VGNkswRm9RR1RfRlhTd3NXSmlVUk5kTnZ6Z2VEWTJVLU1hZGkxN2hBa294MGF6SzJxVV85a3VQbllkS19kZW05STc3Rm9wZUpzLVdydGNOUlB2X2tHbw?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-09-22/microsoft-disrupts-ai-assisted-platform-that-compromised-12-000*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*