Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes

Help Net Security reports on the disruption of the EvilTokens phishing-as-a-service operation, which compromised more than 12,000 inboxes across over 10,000 organizations. Microsoft and partners obtained court authorization to seize 50 operational websites and disable more than 150 related domains. The feed also covers emerging AI-agent security concerns, bot activity, deepfake-enabled social engineering, an AI-assisted malware research framework, a NetBSD ipfilter kernel vulnerability fix, and a brief Elsevier domain hijacking attributed to LAPSUS$ branding. No CVE identifiers are provided in