Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
Microsoft dismantled EvilTokens, an AI-assisted device-code phishing service linked to about 12,000 inbox takeovers.
76
Product
Office 365
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 22, 2026
- Last mentionedSep 22, 2026
Timeline
2 articles · newest firstDavMail 7.0.0 puts most of its work into Microsoft Graph
DavMail 7.0.0 shifts its Exchange gateway work to Microsoft Graph and enables folder delta sync by default.
8
Appears with
- Microsoftvendor · 2
- DavMailproduct · 1
- SpyCloudorganization · 1
- Microsoft Graphproduct · 1
- Microsoft 365product · 1
- TRM Labsorganization · 1
- Railwayorganization · 1
- Coinbaseorganization · 1
- Exchangeproduct · 1
- Shadowserver Foundationorganization · 1
- Cloudflareorganization · 1
- Microsoftorganization · 1
- Cloudflarevendor · 1
- Huntressorganization · 1
- OpenAIvendor · 1
- Storm-2992threat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.