Security
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
The Hacker News·September 22, 2026·1 min read
Microsoft announced the takedown of the EvilTokens device-code phishing service, which used AI throughout the attack chain. The action, authorized by the U.S. District Court for the Eastern District of Virginia, involved Health-ISAC, Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, and The Shadowserver. The service was tied to 12,000 inbox compromises.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.