[Coinbase Collaborates with Microsoft to Combat AI Phishing Platform EvilTokens: Over 175 Associated Domains Deactivated] According to a report by Golden Finance on September 23, Coinbase officially disclosed its collaboration with Microsoft and multiple institutions to combat the AI-driven cybercrime platform EvilTokens. The platform provides "Phishing-as-a-Service" via Telegram bots, leveraging AI to analyze trust relationships and payment permissions in compromised email accounts, and bypassing multi-factor authentication through Microsoft's device code login process. Coinbase's global intelligence team tracked and discovered that between October 2025 and June 2026, EvilTokens generated approximately $1.1 million in revenue through four Tron addresses, involving over 1,000 deposits from more than 700 different addresses. The related evidence supported Microsoft's civil lawsuit, ultimately leading to the seizure of 50 websites and the deactivation of over 175 associated domains. The UK's Metropolitan Police arrested the operators on September 11 and confiscated digital devices. Coinbase stated that this incident did not result in any compromise of Coinbase accounts or credentials, but some customers were manipulated via phishing emails to transfer cryptocurrency to scammer addresses.