Microsoft says the service compromised more than 12,000 inboxes across about 10,000 organizations. The durable security lesson is not that AI writes better phishing emails, but that a low-cost subscription can package token theft and legitimate authentication flows into a repeatable business.
Microsoft has used a U.S. court order to disrupt infrastructure supporting EvilTokens, a phishing-as-a-service operation that the company says compromised more than 12,000 email inboxes across roughly 10,000 organizations.
Axios reports that customers paid about $1,500 to join the service and $500 a month thereafter. That pricing turns a sophisticated attack chain into something closer to rented software: the customer buys access to infrastructure and automation rather than building the stack from scratch.
Generative AI improved the targeting. It was not the mechanism that authenticated the attacker.
The attack abused trust that Microsoft itself had to honor
Microsoft's earlier technical reporting described EvilTokens-linked campaigns that used OAuth device-code authentication. A victim could be persuaded to enter a code into a legitimate Microsoft sign-in flow. Once the user approved the request, the attacker received tokens that could be used to access the account without stealing a password in the conventional sense.
AI made the lure more credible by generating role-specific emails around invoices, RFPs and other familiar business processes. Backend automation generated device codes and managed post-compromise steps. The high-value object, however, was the authenticated token.
That changes the defensive economics. Better spam filtering reduces malicious messages but cannot, by itself, stop a user from authorizing an attacker through a real identity surface. Enterprises need controls around the device-code flow, token issuance, conditional access and post-authentication behavior.
The subscription model compounds the problem. A $500 monthly fee is low relative to the value of one successful corporate email compromise. If a service can standardize infrastructure, phishing customization and token handling, an operator no longer needs each customer to be highly skilled or highly successful for the platform to remain commercially attractive.
Microsoft's disruption raises costs for the current network by taking infrastructure away and exposing parts of the operating model. It does not remove the economics that made the service viable. Once authenticated access is packaged as a subscription product, a successor can rebuild from commercially available hosting, automation and model APIs.
For enterprise security buyers, that makes EvilTokens an identity-control story with AI embedded in the production process. The decisive metric is the falling cost of turning a personalized message into a valid corporate session.