EvilTokens is a phishing-as-a-service (PhaaS) platform that expands the role of stolen Microsoft 365 accounts in financial fraud. Instead of stopping after token theft, it helps cybercriminals analyze compromised inboxes, identify high-value payment conversations, and create convincing fraud messages with AI. First documented in February 2026, EvilTokens was promoted through Telegram. Its Microsoft-focused Office 365 […]
The post AI-Powered EvilTokens Turns Hijacked Microsoft Accounts Into Financial Fraud appeared first on Cyber Security News.