Wazza phishkit gates its Adobe device-code lure behind signed tokens, so scanners see nothing. https://intel.threadlinqs.com/threat/TL-2026-3039 #ThreatIntel #Wazza #PhishKit #DeviceCodePhishing

Microsoft dismantled the EvilTokens phishing platform, an AI-powered service that hijacked 12,000+ mailboxes via OAuth Device Code Flow abuse.

#EvilTokens #Microsoft #PhaaS #DeviceCodePhishing #Storm2992 #OAuth #CyberSecurity