EvilTokens Emerges as New Phishing-as-a-Service Platform for Microsoft Account Takeover

A new and dangerous phishing toolkit has entered the cybercrime scene. In early 2026, a Phishing-as-a-Service platform called EvilTokens began circulating in underground cybercrime communities, offering criminals a ready-to-use kit built to steal Microsoft 365 accounts. Unlike most phishing tools that mimic Microsoft login pages, EvilTokens takes a different approach — it abuses the legitimate […]

The post EvilTokens Emerges as New Phishing-as-a-Service Platform for Microsoft Account Takeover appeared first on Cyber Security News.