SharpTokenFinder is a tool tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed November 26, 2025; most recent activity November 26, 2025.
The ToddyCat advanced persistent threat group has updated its methods to target Outlook emails and Microsoft 365 access tokens. Kaspersky Labs reported that between late 2024 and early 2025, ToddyCat refined its toolkit…