EvilTokens Attack Group Uses Ghost Phishing for Microsoft 365 Account Takeover
EvilTokens is an attack group conducting ghost phishing campaigns targeting US and European businesses. They use Microsoft Device Code Phishing and AES-GCM…
Tag: account takeover
The Verification Step Is the New ATO Battleground in 2026
Account takeover (ATO) attacks are shifting from credential stuffing to targeting identity verification and recovery layers as passkeys become mainstream. According to…
FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys
The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, adding a new tactic where attackers coax…
94% of Incidents Involve Anonymized Infrastructure: Study Reveals Reactive Security Gaps
A recent industry study conducted by Spur Intelligence, surveying over 200 security practitioners, reveals that anonymizing infrastructure—including VPNs and residential proxy networks—now…