Skip to content
Today
Sign in

other

Storm-2992

Microsoft's designation for the threat actor it credits with developing and supporting the EvilTokens phishing kit, which it says has no known affiliation with other cybercrime groups.

Sign in to follow

Current clusters

security8 publishers

EvilTokens rented an AI-powered inbox-scanning tool and a device-code MFA bypass for a $1,500 fee plus $500 a month

Microsoft's Digital Crimes Unit and its partners pulled down the EvilTokens phishing service about seven months after it launched, and British police arrested its two suspected operators. The authentication technique it sold survives on other platforms.

Publishers:bleepingcomputer.comcyberscoop.comhelpnetsecurity.commicrosoft.comsecurityaffairs.comsecurityweek.comthehackernews.comtherecord.media

Perspective Coverage

5 publishers
Builder
Builder 43%
Operator
Operator 40%
Investor
Investor 17%

Reality

Evidence72
Adoption78
Hype gap+18
Incentives66
Confidence74