Microsoft took legal action this month against an AI-powered cybercriminal platform called EvilTokens, using court authorization to take the tool offline and work with police in the U.K. to arrest those allegedly behind it. 

Available on Telegram for a $1,500 initiation fee and a recurring monthly $500 subscription, EvilTokens provided cybercriminals with artificial intelligence tools enabling them to compromise accounts, analyze breached inboxes and find the best methods for monetizing their access through fraud. 

Microsoft Digital Crimes Unit associate general counsel Steven Masada said they partnered with health sector cybersecurity non-profit Health-ISAC on a lawsuit in U.S. District Court that allowed them to dismantle the platform and related infrastructure. 

Microsoft also worked with officers within U.K.’s Metropolitan Police Service's cybercrime team, resulting in arrests of two men, aged 32 and 38, earlier this month. Microsoft declined to identify the men but said both have since been released on bail while police continue their investigation. 

“The two individuals were alleged operators of EvilTokens. We believe others may have supported the service in various capacities,” a spokesperson told Recorded Future News.