#oauth abuse

1 story

#account compromise #account takeover #ai chatbot #ai-assisted attacks #business email compromise #cybercrime #device code authentication #email fraud #eviltoken #microsoft #microsoft entra

Microsoft shuts down AI scam platform that stole 12,000 accounts
EvilTokens used an AI chatbot to automate email compromise and fraud at scale, forcing Microsoft to take down 50 websites.
Ars Technica · 1m