PRIMARY REPORTS · NOT SCORABLE BY DESIGN

EvilTokens AI-enabled account compromise and fraud

This source is retained for threat and defensive-evidence research. Its documented limits do not support a separate deployment score at this record's scope.

Use case sources

Source reports and analysis supporting this case are listed below. AITBM interpretation and any indicative scoring are derived from this public evidence.

Incident overview

Microsoft documents a disrupted cybercrime service combining stolen inbox access with AI-assisted mailbox analysis and fraud planning.

Why this analysis has no ERS

The investigator reports attacker use of an AI chatbot in account fraud, with no identified victim AI system, deployment boundary, or AITBM control outcome.

Status: Not scorable by design · Classification: Incident · source date 2026-09-22

AIDEFEND evidence routes

No AIDEFEND control evidence is assigned to this record.

Related AITBM rubrics

No direct IVP route recorded.

Sources