Microsoft Disrupts EvilTokens Phishing Platform

Microsoft, UK police and partners disrupted EvilTokens, a phishing-as-a-service kit that compromised 12,000 inboxes across 10,000 organizations. Two men aged 32 and 38 were arrested and released on bail; 50 websites were seized and 150 domains disabled. The platform used AI to scale device-code phishing and sold access via Telegram for $1,500 plus a $500 subscription.