EvilTokens made phishing-as-a-service look easy. Then it got taken down
September 23, 2026
1 min read
3 views
cybersecurity
news
newsapi
Microsoft, Coinbase and law enforcement took down EvilTokens, a phishing kit that compromised 12,000 inboxes through device-code phishing and AI. EvilTokens showed up in February 2026 and moved fast. Within months it had compromised more than 12,000 inboxes a
Was this article helpful?
0 found this helpful