Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le juin 16, 2026, 09:02:02

Titre: [Eset]EvilTokens: A phishing attack that doesn’t steal your password
Posté par: igor51 le juin 16, 2026, 09:02:02
EvilTokens: A phishing attack that doesn’t steal your password

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages

Source: EvilTokens: A phishing attack that doesn’t steal your password (https://www.welivesecurity.com/en/cybercrime/eviltokens-phishing-doesnt-steal-password/)