NewsESET WeLiveSecurity
EvilTokens: A phishing attack that doesn’t steal your password
Teaser from the source
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages
This is the RSS-feed teaser. Read the full article at the original source.
Read at ESET WeLiveSecurityMore on EvilTokens
Other news entries
- What EvilTokens teaches us about defending against AI-assisted attacksNewsCSO Online
- AI-Powered Phishing Platform EvilTokens Disrupted by MicrosoftNewsSecurityWeek
- Microsoft’s EvilTokens takedown sheds light on state of AI-powered cybercrimeNewsCSO Online
- Microsoft Disrupts EvilTokens Device Code Phishing ServiceNewsDark Reading
- Microsoft disrupts AI-assisted platform that compromised 12,000 accountsNewsArs Technica — Security
- Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox CompromisesNewsThe Hacker News
- UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websitesNewsThe Register — Security
- EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accountsNewsBleepingComputer
Source: https://www.welivesecurity.com/en/cybercrime/eviltokens-phishing-doesnt-steal-password/
ID