New widespread EvilTokens kit: device code phishing as-a-service – Part 1

EvilTokens is a rapidly adopted Phishing-as-a-Service kit that enables cybercriminals to bypass MFA and hijack Microsoft 365 accounts at scale using advanced device code phishing techniques, automation, and post-compromise tools for persistent Business Email Compromise.