Main session 3 – Cybercrime-as-a-service: impact of AI
Artificial intelligence is rapidly transforming the cybercrime ecosystem, lowering barriers to entry and amplifying the reach of crime-as-a-service models. From automated phishing and social engineering to AI-assisted malware, deepfake fraud, and large-scale scam operations, generative tools are enabling more sophisticated and scalable criminal services.
This session examines how AI is reshaping the structure, speed, and economics of cybercrime, and what this means for investigations, attribution, and international cooperation. Focusing on practical responses, participants will discuss how existing legal frameworks and investigative tools can be applied to AI-driven crime-as-a-service, where new gaps are emerging, and which operational and capacity-building measures can help disrupt these evolving business models.
Presentations and panel discussions
Materials
Resources
- Microsoft On the Issues Blog + Explainer Video: https://blogs.microsoft.com/on-the-issues/2026/09/22/disrupting-eviltokens-the-ai-chatbot-built-for-cybercrime/
Blog authored by Steven Masada; explainer video by Carlton Gammons. - Microsoft Security Blog: https://www.microsoft.com/en-us/security/blog/2026/09/22/unmasking-eviltokens-getting-to-the-root-of-device-code-phishing/
Provides technical analysis of device-code phishing, the EvilTokens attack chain, mitigations, detections, and hunting guidance. - Microsoft Digital Crimes Unit: Interactive disruption timeline
Explore major DCU disruptions and operations against cybercrime and nation-state threats since 2008. - Minecraft Education: The Velocity Prize: https://education.minecraft.net/en-us/discover/velocity-prize
Race for the Flag. Train for the Future.
If you have any questions related to this workshop, please contact the Octopus Conference Secretariat