New EvilTokens Attack Exposes Browser Visibility Gap in Enterprise SOCs

The feed highlights multiple active threats and security trends: an "EvilTokens" phishing technique that conceals takeover indicators until malicious code runs in the browser, creating visibility gaps for enterprise SOCs and increasing account takeover risk; a personalized FIFA World Cup 2026 T-shirt phishing campaign used to distribute Voidrift malware via trusted-looking emails and sites; and a surge of newly-registered domains exploiting a Venezuela earthquake to facilitate donation scams. Other items cover third-party/agent identity security, secure office software guidance, and WhatsApp's