EvilTokens device-code phishing kit totally more evil than we all thought
1. Executive summary The EvilTokens phishing-as-a-service (PhaaS) platform, which abuses Microsoft's OAuth 2.0 Device Authorization Grant (RFC 8628) to bypass
02 Jul 2026 · 9 min read
read →