EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

Microsoft’s Digital Crimes Unit has disrupted the EvilTokens phishing-as-a-service platform. The service enabled threat actors to steal session tokens, compromising over 12,000 accounts across more than 10,000 organizations. Administrators should remain vigilant against session hijacking and MFA bypass techniques.