> Hundreds of orgs compromised daily in Microsoft device code phishing attacks
[AUTHOR: Jessica Lyons]
[DATE: 07/04/2026 20:19]
[LANGUAGE: EN]
Who needs MFA when you've got EvilTokens? Hundreds of organizations have been compromised daily by a Microsoft device-code phishing campaign that uses AI and automation at nearly every stage of the attack chain to ultimately snoop through corporate email inboxes and steal financial data.…