[Eset]EvilTokens: A phishing attack that doesn’t steal your password

[igor51]

EvilTokens: A phishing attack that doesn’t steal your password

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages

Source: EvilTokens: A phishing attack that doesn’t steal your password