Story perspectives

UK, Microsoft, Coinbase dismantle EvilTokens phishing network

By Drooid · Sep 23, 2026, 3:36 PM UTC · How we work

Summary

Story summary

UK police, Microsoft and Coinbase dismantled the EvilTokens phishing network.
The kit sold on Telegram for $100-$300 a month included an AI analyst mapping trusted relationships.
It enabled scammers to bypass two-factor authentication and remain hidden after password resets.
Metropolitan Police arrested two suspects, 32 and 38, on September 11 and released them on bail.
Investigators found $1.1 million stolen via Tron wallets from over 700 addresses between Oct 2025 and Jun 2026.

1 of 1

Story summary

UK police, Microsoft and Coinbase dismantled the EvilTokens phishing network.
The kit sold on Telegram for $100-$300 a month included an AI analyst mapping trusted relationships.
It enabled scammers to bypass two-factor authentication and remain hidden after password resets.
Metropolitan Police arrested two suspects, 32 and 38, on September 11 and released them on bail.
Investigators found $1.1 million stolen via Tron wallets from over 700 addresses between Oct 2025 and Jun 2026.