New Malware Kit “EvilTokens” Fuels Microsoft Account Phishing Attacks
A new malware kit called EvilTokens is making waves in the cybersecurity world by enabling sophisticated phishing attacks targeting Microsoft accounts. Sold through Telegram, this kit allows cybercriminals to trick users into authorizing access to their accounts using a deceptive OAuth 2.0 device authorization method.
The attacks primarily affect employees in finance, HR, and logistics, with victims receiving emails that appear to contain legitimate business documents. Once they click on the links, they are led to a fake login page that mimics trusted services, ultimately granting attackers access to sensitive information.
Countries like the United States, Canada, and France are among the hardest hit. Experts recommend that users verify the authenticity of any login requests and enable multi-factor authentication to enhance security.
Risk Level: High
The threat posed by EvilTokens emphasizes the need for vigilance in the digital landscape.
Source: View Original Report
