微软牵头中断用 AI 聊天机器人攻陷 12000 个账户的 EvilTokens
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
微软周二表示，已牵头在全行业中断订阅制诈骗平台 EvilTokens，该平台借助 AI 聊天机器人在数个月内攻陷 12000 个 Microsoft 账户。平台于二月经 Telegram 频道推出，收取 $1500 首付和每月 $500，可批量入侵邮箱、分析收件箱、筛选潜在收益更高的目标，并起草冒充可信联系人的后续邮件。
Microsoft said Tuesday that it led an industry-wide disruption of a subscription-based scam platform that used an AI chatbot to compromise 12,000 Microsoft accounts over a few-month span.
Named EvilTokens, the platform was introduced over a Telegram channel in February and charged an initial $1,500 fee and a recurring $500 charge each month after that. EvilTokens provided a single service for streamlining most steps required to compromise email accounts in large numbers. From there, the platform helped customers analyze inboxes, select targets that would provide the biggest potential payouts, and draft follow-up emails that provided realistic ruses for tricking company employees into transferring funds to attacker-controlled accounts.
Minutes, not days
“While EvilTokens helped cybercriminals access email accounts, at the center of the service was an AI-style chatbot that could analyze a victim’s inbox and help criminals identify trusted relationships, payment authorizations, and sensitive responsibilities, as well as other circumstances where fraud was most likely to succeed,” Microsoft said. “The platform could even recommend fraud strategies, including drafting messages that impersonated trusted contacts to help criminals trick victims into taking action.”
来源：Ars Technica · AI · arstechnica.com