EvilTokens compromised over 12,000 Microsoft 365 inboxes using device code phishing before Microsoft’s Digital Crimes Unit shut it down. Here is how the attack works and a five-point check for …
Tag:
conditional access
-
-
The Kratos phishing kit stole Microsoft 365 session cookies to bypass MFA entirely. Here’s exactly how that attack works, and the practical steps that actually reduce the risk.