Microsoft Disrupts EvilTokens Device Code Phishing Service

Microsoft has taken action against a phishing-as-a-service platform, seizing 50 websites and disabling over 150 domains. The target of this platform was Microsoft 365 accounts, with the service being known as EvilTokens Device Code Phishing. This effort was a coordinated disruption aimed at stopping the phishing operation. The action is intended to prevent further phishing attempts against Microsoft 365 users. The phishing platform relied on device code phishing to gain unauthorized access to accounts. Microsoft's disruption is a significant move to protect its users from this type of threat.