EvilTokens Compromised 12,000 Inboxes and Let AI Choose the Next Victim

The AI did more than write convincing phishing messages. It read stolen mailboxes, mapped trust and told criminals which relationships were most valuable to abuse.

The AI did more than write convincing phishing messages. It read stolen mailboxes, mapped trust and told criminals which relationships were most valuable to abuse.

A million-plus email campaign combined fake executive approval, a forged ServiceNow invoice and an invented forwarded conversation to seek nearly $50,000 transfers.

Operation Jackal IV led to 58 arrests and identified 263 suspects, but the deeper finding was a service economy supplying domains, money laundering and other operational capabilities to organised fraud groups.