New Ghost Phishing Wave Is Breaking Traditional Email Security

A recent campaign known as EvilTokens is targeting businesses in the US and Europe, revealing a vulnerability in traditional email security. This technique, referred to as ghost phishing, involves hiding the malicious page until it is decrypted and loaded in the victim's browser. As a result, traditional URL checks may not detect the attack, putting Microsoft 365 access and sensitive data at risk. The delayed activation of the malicious page allows it to evade detection. This ghost phishing method poses a significant threat to security.