Feed / Defender
highDefendersecurity advisoryms_security_blog · Sep 22, 2026
Unmasking EvilTokens: Getting to the root of device code phishing
Microsoft disrupted a major PhaaS platform, EvilTokens, which was used for device code phishing attacks. This action enhances threat protection and vulnerability management.
“EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners, Microsoft Digital Crimes Unit (DCU) facilitated a disruption of EvilTokens infrastructure and oper”
View original article →Security
threat_protectionvulnerability_management
Audience
adminsecurity_engineer
Environment
cloudhybrid
Classification confidence: 95%
Loading correlations…