EvilTokens Phishing Attack: How Device Code Phishing Is Stealing Microsoft Account Tokens in 2026
Cybersecurity researchers are warning about a sophisticated phishing-as-a-service operation that uses device-code authentication, automated infrastructure, AI-assisted phishing lures and stolen authentication tokens to compromise organizational accounts. Microsoft Threat Intelligence published new research on September 22, 2026, detailing a phishing platform called EvilTokens. According to Microsoft, the platform emerged in February 2026 and quickly became one