Microsoft AI Updates: September 23, 2026

1. Microsoft Took Down EvilTokens, a Subscription Fraud Platform Built Around an Inbox-Reading Chatbot

Microsoft. Microsoft led an industry disruption of EvilTokens, a Telegram-advertised service charging $1,500 up front plus $500 a month that compromised 12,000 Microsoft accounts across 10,000 organizations, mostly in the US followed by Canada, the UK, Australia, India, and France. The differentiator was not the account takeover, which used legitimate device code authentication, but the chatbot at the center: it analyzed a victim’s inbox to identify trusted relationships, payment authorizations, and sensitive responsibilities, then recommended fraud strategies and drafted impersonation emails. Microsoft seized 50 websites and 150 additional domains through legal process, and the UK Metropolitan Police arrested two men. Source