Skip to content
Threat Feed
Subscribe

Actor

Storm-2992

1 brief RSS
high threat

EvilTokens Phishing-as-a-Service Platform Analysis

EvilTokens is a Phishing-as-a-Service (PhaaS) platform operated by threat actor Storm-2992 that facilitates adversary-in-the-middle (AiTM) attacks by abusing OAuth device code authentication flows to compromise user accounts.

Microsoft 365 +1 Storm-2992 phishing cloud-security oauth bec
3t