@steelwise.bsky.socialEvilTokens got into 12,000 inboxes without stealing a password. People typed a short code into a genuine Microsoft page and passed the MFA check themselves. Most businesses never need that sign-in route and can block it. Read the filing #microsoft365 #phishing #eviltokens #infosec
@threadlinqs.bsky.socialEvilTokens phishes the real Microsoft login page - victims type the code, attackers get the tokens. https://intel.threadlinqs.com/threat/TL-2026-2873 #ThreatIntel #EvilTokens #telegram #Storm
@threadlinqs.bsky.socialDeepfaked execs on live video calls are beating identity checks that email filters never touch. https://intel.threadlinqs.com/threat/TL-2026-2774 #ThreatIntel #zgRAT #telegram #EvilTokens
@bizbln.bsky.socialMicrosoft shuts down EvilTokens AI hacking service 12k email accounts compromised! Vigilance needed. #Microsoft #EvilTokens #AI #Cybersecurity #DataBreach #MFA #Hackers
@securityonline.bsky.socialMicrosoft dismantled the EvilTokens phishing platform, an AI-powered service that hijacked 12,000+ mailboxes via OAuth Device Code Flow abuse.
#EvilTokens #Microsoft #PhaaS #DeviceCodePhishing #Storm2992 #OAuth #CyberSecurity
@cyberkendra.comMicrosoft disrupted EvilTokens, a device code phishing service that breached 12,000+ inboxes; UK police arrested two suspects.
@cyberveille-ch.bsky.social📢 Microsoft démantèle EvilTokens, plateforme cybercriminelle IA de fraude financière
EvilTokens est une plateforme cybercriminelle commerciale lancée en février 2026, combinant compromission de comptes, analyse de…
🟢 vérification factuelle haute
#EvilTokens #AIEnabledCybercrime #Cyberveille
@thenewoil.org#EvilTokens #PhaaS disrupted after compromising 12,000 #Microsoft accounts
@hackread.bsky.social#EvilTokens turned stolen inboxes into AI-assisted fraud operations - Microsoft has now seized 50 websites and disabled over 150 related domains, while 2 have been arrested.
@hendryadrian.bsky.socialPhishing and malware remain active: EvilTokens hit 12,000 Microsoft accounts, Contagious Interview infected 30,000 devices and stole $10.71M in crypto, and TASK#STOMP exfiltrated Wi-Fi passwords, screenshots, and business files. #EvilTokens
@hendryadrian.bsky.socialMicrosoft-led action took down EvilTokens, a phishing service that hit 12,000+ inboxes across 10,000+ organizations. Authorities seized 50 sites, disabled 150+ domains, and arrested two suspects. #Microsoft #EvilTokens #OpenAI
@hendryadrian.bsky.socialMicrosoft and partners disrupted EvilTokens, a phishing-as-a-service operation linked to 12,000+ compromised Microsoft inboxes. 50 sites seized, 175+ domains disabled, and two suspects arrested in the UK. #Microsoft #EvilTokens #UK
@securityonline.bsky.socialMicrosoft led a coalition disrupting EvilTokens cybercrime platform. Learn how the EvilTokens cybercrime platform used AI and device code phishing.
@thedailytechfeed.comMicrosoft dismantles EvilTokens: AI phishing service that hijacked 12K+ Microsoft 365 inboxes via device-code MFA flow taken down. #Phishing #IdentitySecurity #Microsoft365 #EvilTokens #AI thedailytechfeed.com/microsoft-sh...
@winfuture.de#Microsoft hat die Phishing-Plattform #EvilTokens zerschlagen. Der Dienst nutzte KI, um gestohlene Postfächer zu analysieren und gezielten Zahlungsbetrug vorzubereiten.
@hendryadrian.bsky.socialMicrosoft and partners disrupted EvilTokens, a phishing-as-a-service platform that compromised over 12,000 Microsoft accounts at 10,000+ organizations using device-code phishing and AI tools to bypass MFA. #EvilTokens #Microsoft #Storm2992
@threadlinqs.bsky.socialAI wrote the phishing lures. A real Microsoft login page did the rest. MFA never stood a chance. https://intel.threadlinqs.com/threat/TL-2026-2614 #ThreatIntel #Storm #EvilTokens #Storm2992
@threadlinqs.bsky.socialPhishing kits now steal your Microsoft login without ever touching your password or MFA. https://intel.threadlinqs.com/threat/TL-2026-2468 #ThreatIntel #Kali365 #EvilTokens #OctoLink
