eviltokens phaas

A massive 37.5x surge in device code phishing attacks has occurred this year, exploiting a legitimate OAuth feature designed for…

A new phishing-as-a-service toolkit called EvilTokens is enabling a surge in sophisticated device code phishing attacks against Microsoft 365 accounts,…