EvilTokens infrastructure disrupted as 50 sites are seized
SecurityUnverifiedUpdated:
A coordinated action reportedly targeted EvilTokens phishing infrastructure. Microsoft seized fifty sites and disabled more than 150 related domains, while two suspected administrators were arrested in the UK.
Action against fifty sites and more than 150 related domains
The report states that Microsoft and partners acted against EvilTokens, taking control of 50 websites and disabling over 150 domains supporting the service. It also says London's Metropolitan Police arrested two men alleged to have administered the website, while Microsoft notified affected customers and assisted with compromised accounts.
EvilTokens had been operating as a subscription phishing service, with infrastructure used to run the service still available.
The report says Microsoft seized 50 EvilTokens websites and disabled more than 150 related domains; two suspected site administrators were arrested in London and released on bail as the investigation continued.
EvilTokens was described as a phishing kit—a service sold to help criminals capture access to accounts—that could bypass multi-factor authentication. The reported action targets both its customer-facing sites and supporting infrastructure.
Sources
- The RegisterUK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websitesRead source →