thehackernews.com·May 19, 2026
In February 2026, the EvilTokens phishing-as-a-service platform compromised over 340 Microsoft 365 organizations in five weeks by tricking users into entering a code on a fake site, leading them to believe they had completed their multi-factor authentication.
The launch of the EvilTokens phishing-as-a-service platform underscores the critical need for organizations to enhance their security awareness training and implement more robust MFA mechanisms that go beyond typical challenges, such as utilizing phishing-resistant methods like FIDO2 keys. This incident highlights the importance of continuously evolving authentication strategies to counter increasingly sophisticated social engineering attacks.