Riding the Rails: Threat Actors Abuse Railway.com PaaS as Microsoft 365 Token Attack Infrastructure

Threat actors are leveraging Railway.com's Platform-as-a-Service and the EvilTokens Phishing-as-a-Service platform to rapidly deploy highly evasive, AI-tailored Microsoft 365 device code phishing campaigns at scale, bypassing traditional security controls and compromising hundreds of organizations across multiple sectors.