Off the Rails: How Hackers Are Using AI to Bypass MFA

The earliest adopter of AI wasn't your security team. It wasn't your vendor. It was the adversary.

While the industry was still debating AI's potential, a Phishing-as-a-Service operation called EvilTokens was already in production, with AI-assisted lure generation, a 24/7 support team, customer feedback channels, and a product store. In February 2026, they weaponized Railway, a legitimate cloud deployment platform, to stand up token-harvesting infrastructure at machine speed. By March 2, Huntress was watching anomalous authentication events fire across dozens of organizations simultaneously. By March 19, more than 340 organizations across five countries had been hit.

Legacy cybercrime scaled by adding people and automation. This scales by adding compute, better prompts, and tighter workflows. The tradecraft didn't just get faster. It became autonomous and productized.

This is the most influential attack campaign you've probably never heard of. And the way it was built—modular, AI-assisted, running like a business—changes what defenders need to understand about the threat landscape going forward.

In this live conversation, a Huntress Threat Intelligence Analyst, Casey Smith, and GM of Global Threat Intelligence at Microsoft unpack what EvilTokens and the Railway campaign actually reveal about how adversaries are using AI — and where the defense gaps are widest. 

Is MFA still meaningful when attackers are abusing legitimate auth flows to bypass it entirely? When AI turns attack infrastructure into a subscription service with a support team, what does the defender's playbook actually need to look like? And what does it mean that a single detection from Huntress blocked Railway CIDR ranges across hundreds of thousands of organizations in a single move — while most of those organizations didn't even know they'd been targeted?

What you'll walk away with:

A clear-eyed picture of how AI has fundamentally changed the economics and speed of adversary operations — not in theory, but documented, in the wild, still active. Two experts. One watershed moment. Enough disagreement to make it worth your time.

Come ready to push back.