It a complete BEC operations environment, Talos researcher says EvilTokens, the device code phishing kit that can allow criminals to bypass multi factor authentication MFA and silently authenticate as the victim to the organization Microsoft 365 applications, appears to be even more insidious than we all thought. Cisco Talos incident responders on Wednesday described how the lure reaches a victim inbox, and revealed new capabilities alongside a “more sophisticated evasion approach” than...
