In March 2026, the EvilTokens phishing kit emerged as a significant threat, allowing cybercriminals to bypass multi-factor authentication (MFA) and compromise Microsoft 365 accounts. This Phishing-as-a-Service (PhaaS)…
44 articles · Updated July 1, 2026
Recent Intelligence Reports
When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website— Securelist · July 6, 2026