security: Unmasking EvilTokens: Getting to the root of device code phishing
Microsoft Security Blog
2026-09-22
Microsoft says EvilTokens emerged as a major phishing-as-a-service platform for device code phishing, using AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners, Microsoft’s Digital Crimes Unit disrupted its infrastructure and operations.