Mail Server Security

www.kaspersky.com • July 7, 2026

Kaspersky Security for Mail Server (KSMS) provides trusted and secure corporate email exchange, countering spam, email-borne infections, all forms of phishing, business email compromise (BEC), QR code attacks, and other threats.

All applications are available under a single unified Kaspersky Security for Mail Server license. Combine them for comprehensive coverage, or choose the apps that best suit your needs from a wide range of email security tools for:

Ready-to-use Secure Email Gateway (SEG) software appliance, complete with operating system, mail transfer agent (MTA) and mail security app.

The solution can be provided as a virtual appliance or standalone lightweight application.

Native integration with Microsoft Exchange Server ensures complete protection of mail traffic – from gateway to mailbox level, reducing the risks from spam, social engineering-based attacks and other mail-borne threats.

A single SaaS security solution that protects Microsoft Office 365’s communication and collaboration services – Exchange Online, OneDrive, SharePoint Online and Teams from security threats.

If you'd like to find out how to protect your business from complex cybersecurity threats, your local partner or schedule a demo .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

EvilTokens Phishing Kit Exploits Microsoft 365 with AI-Driven BEC Tactics In March 2026, the EvilTokens phishing kit emerged as a significant threat, allowing cybercriminals to bypass multi-factor authentication (MFA) and compromise Microsoft 365 accounts. This Phishing-as-a-Service (PhaaS) platform utilizes Microsoft's OAuth 2.0 Device Authorization Grant to capture victim tokens, enabling Business Email Compromise (BEC) attacks. The platform has rapidly gained traction, with Microsoft reporting hundreds of organizations compromised daily. Cisco Talos identified an affiliate panel named ARToken, which enhances EvilTokens' capabilities by incorporating AI for personalized lures and automated post-compromise actions. The phishing campaigns have increased by 1,380% compared to the previous year, with targeted emails leveraging real vendor relationships to deceive victims. The attack method involves sending emails that appear legitimate but redirect to attacker-controlled Microsoft 365 workspaces. Current assessments indicate that EvilTokens and its affiliates are continuously evolving their tactics, posing a serious threat to organizations using Microsoft 365. 44 sources 71

Extracted Entities

Mail Server Security

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (4)

Tools (3)