<![CDATA[#TDR analysts uncovered an emerging Phishing-as-a-Service (#PhaaS) platform called #EvilTokens, which offers device code phishing pages and AI-augmented features to automate and scale #BEC workflows.]]> analysts uncovered an emerging Phishing-as-a-Service (#PhaaS) platform called , which offers device code phishing pages and AI-augmented features to automate and scale workflows.
⬇️
https://buff.ly/RvF5Kux

]]>https://board.circlewithadot.net/topic/50e2466c-66cb-496f-b9db-2785860ff5f1/tdr-analysts-uncovered-an-emerging-phishing-as-a-service-phaas-platform-called-eviltokens-which-offers-device-code-phishing-pages-and-ai-augmented-features-to-automate-and-scale-bec-workflows.RSS for NodeMon, 06 Apr 2026 04:04:04 GMTMon, 30 Mar 2026 15:56:26 GMT60<![CDATA[Reply to #TDR analysts uncovered an emerging Phishing-as-a-Service (#PhaaS) platform called #EvilTokens, which offers device code phishing pages and AI-augmented features to automate and scale #BEC workflows. on Mon, 30 Mar 2026 15:56:27 GMT]]>Our report offers a technical analysis of the EvilTokens kit, its delivery campaigns, and the adversary's infrastructure.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/sekoia_io/statuses/116318941154191279https://board.circlewithadot.net/post/https://infosec.exchange/users/sekoia_io/statuses/116318941154191279Mon, 30 Mar 2026 15:56:27 GMT<![CDATA[Reply to #TDR analysts uncovered an emerging Phishing-as-a-Service (#PhaaS) platform called #EvilTokens, which offers device code phishing pages and AI-augmented features to automate and scale #BEC workflows. on Mon, 30 Mar 2026 15:56:26 GMT]]>Active since late February 2026 and rapidly adopted by cybercriminals, TDR analysts believe EvilTokens will become a serious competitor in the phishing and BEC landscape.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/sekoia_io/statuses/116318941127946746https://board.circlewithadot.net/post/https://infosec.exchange/users/sekoia_io/statuses/116318941127946746Mon, 30 Mar 2026 15:56:26 GMT<![CDATA[Reply to #TDR analysts uncovered an emerging Phishing-as-a-Service (#PhaaS) platform called #EvilTokens, which offers device code phishing pages and AI-augmented features to automate and scale #BEC workflows. on Mon, 30 Mar 2026 15:56:26 GMT]]>EvilTokens device code phishing pages allows attackers to capture Microsoft refresh and access token, weaponise them, harvest victims' mailbox, and automatically craft BEC emails using AI.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/sekoia_io/statuses/116318941106977843https://board.circlewithadot.net/post/https://infosec.exchange/users/sekoia_io/statuses/116318941106977843Mon, 30 Mar 2026 15:56:26 GMT