Eviltokens

notes

Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals

1. Executive summary Microsoft's Digital Crimes Unit, working with Health-ISAC, Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver Foundation and TRM Labs, has seized

22 Sep 2026 · 7 min read read →

notes

EvilTokens device-code phishing kit totally more evil than we all thought

1. Executive summary The EvilTokens phishing-as-a-service (PhaaS) platform, which abuses Microsoft's OAuth 2.0 Device Authorization Grant (RFC 8628) to bypass

02 Jul 2026 · 9 min read read →

AI

Original inspiration for this from https://abnormal.ai/blog/eviltokens-oauth-device-codes-bec-operations EvilTokens Is Still Live: Three Months On, the PhaaS Platform Has

25 Jun 2026 · 19 min read read →