EvilTokens is a phishing-as-a-service platform that sidesteps traditional defenses by hijacking account access through a legitimate Microsoft login flow—then deploys AI to automate business email compromise at scale.
Unlike credential-harvesting attacks, EvilTokens never asks victims to enter a password on a fake page. Instead, its targets authenticate directly on Microsoft infrastructure while the platform silently captures OAuth tokens and converts them into a persistent, fully-operational BEC toolkit. Join Abnormal Intelligence to learn how EvilTokens behaves, how it bypasses conventional controls, and what security teams can do to minimize exposure.
Fill out the form to watch the webinar on demand.
Obtenir des crédits ISC2 (1 crédit)
Cette ressource est éligible aux crédits ISC2 CPE. Soumettez le formulaire de crédit pour réclamer vos crédits de formation continue.
