Microsoft Disrupts EvilTokens Device Code Phishing Service
Microsoft seized 50 sites and disabled over 150 domains used by EvilTokens to phish Microsoft 365 accounts.
Microsoft disrupted EvilTokens, a phishing-as-a-service platform that used device-code phishing against Microsoft 365 accounts. The company seized 50 websites and disabled more than 150 domains in a coordinated effort. The action targets infrastructure used to phish cloud identities rather than a newly disclosed software flaw.
- EvilTokens is a device-code phishing-as-a-service platform
- Microsoft seized 50 websites during the disruption
- More than 150 associated domains were disabled
- The service targeted Microsoft 365 accounts
- Vendors
- Microsoft
- Products
- Microsoft 365
- Threat actors
- EvilTokens
- Organizations
- Microsoft
From the original article
Microsoft seized 50 websites and disabled more than 150 domains as part of a coordinated disruption effort against a phishing-as-a-service platform targeting Microsoft 365 accounts.
By Alexander Culafi · darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.