A new malicious kit called EvilTokens integrates device code phishing capabilities, allowing attackers to hijack Microsoft accounts and provide advanced features for business email compromise attacks. [...]
New EvilTokens service fuels Microsoft device code phishing attacks
Summary + source link. No paywalls, no tracking.