EvilTokens Phishing Service Uses AI and Device Code Attacks to Hijack Microsoft Accounts

The service was linked to more than 12,000 compromised inboxes across over 10,000 organizations worldwide and is tracked by Microsoft as Storm-2992. EvilTokens emerged in February 2026 and quickly gave cybercriminals a ready-made platform for large-scale business email compromise attacks. It combined phishing templates, malicious landing pages,... Weiterlesen