Microsoft and Coinbase probe leads to arrest of EvilTokens phishing network operators

• —EvilTokens sold phishing kits on Telegram for $100–300 per month
• —Its AI analyst mapped trusted relationships and payment approvers
• —About $1.1 million in crypto was collected on Tron from 700+ addresses
• —Microsoft seized 50 websites and disabled over 175 domains