Microsoft Shuts Down Phishing-as-a-Service Platform Targeting Microsoft 365

Microsoft conducted a coordinated takedown of EvilTokens, a phishing-as-a-service operation targeting Microsoft 365 credentials. The action resulted in…

While the platform has been disrupted, reinforce multi-factor authentication across your Microsoft 365 environment and train staff to recognize phishing attempts. Verify conditional access policies are in place and MFA is enforced on sensitive accounts.