SecurityThe Registerabout 1 hour ago
EvilTokens phishing kit bypasses MFA with new tricks
3 min read
Cisco Talos revealed EvilTokens device-code phishing kit now includes a PhaaS operator panel called ARToken. The kit bypasses MFA to silently authenticate as victims to Microsoft 365 apps. Talos recovered lures abusing a real vendor relationship between a US life-sciences company and a plumbing contractor.
Level
Hype check
Tap to vote and see what everyone thinks.
