TREE NEWS update: Coinbase and Microsoft, working with other organizations, have taken down the AI-driven cybercrime platform EvilTokens, which offered phishing-as-a-service via Telegram bots. Coinbase’s global intelligence team traced roughly $1.1 million in revenue sent to four Tron addresses between October 2025 and June 2026, across more than 1,000 deposits from over 700 addresses. The evidence supported Microsoft’s civil suit, leading to 50 websites seized and more than 175 related domains deactivated.
Coinbase, Microsoft Disrupt AI Phishing Platform EvilTokens
The significance here is less the takedown itself than the on-chain attribution: tracing a subscription-based crime service through its payment rails is becoming a standard part of disruption, not an afterthought. That model affects phishing operators and the exchanges whose infrastructure their proceeds touch, and it shows blockchain analytics feeding directly into civil litigation. Whether this pressure merely displaces such services to new payment channels is the open question worth watching.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.