New widespread EvilTokens kit: device code phishing as-a-service – Part 1

This post was originally distributed as a private FLINT report to our customers on 25 March 2026. Introduction In March 2026, through our monitoring of phishing-focused cybercrime communities, Sekoia’s Threat Detection & Research (TDR) team uncovered EvilTokens, a new turnkey Microsoft device code phishing kit sold as Phishing-as-a-Service (PhaaS). These phishing pages have been circulating […]

La publication suivante New widespread EvilTokens kit: device code phishing as-a-service – Part 1 est un article de Sekoia.io Blog.