EvilTokens: A Device Code Phishing Kit with AI Analytics
July 7, 2026
EvilTokens is a phishing kit that steals Microsoft 365 tokens through the OAuth device code flow. It also provides AI-powered analytics services to help customers identify valuable data for fraud campaigns. The platform commoditizes post-compromise activities, such as inbox analysis and stakeholder mapping.