Microsoft has disrupted EvilTokens, a phishing-as-a-service platform that was linked to more than 12,000 compromised email inboxes across more than 10,000 organizations worldwide. The service used device-code phishing to gain access to Microsoft accounts and then used AI-powered tools to analyze compromised mailboxes and help attackers identify opportunities for further fraud. The operation highlights how […]
I received an email from someone calling himself “Daniel Kelvin Esq Solicitor.” He claimed to be handling the affairs of a deceased client and said there were business transaction funds waiting to be released. According to the email, I could become the client’s next of kin and receive 50% of the money, while he would […]
Small businesses are no longer flying under the radar of cybercriminals. In fact, many attackers see them as easier targets because they often operate with limited budgets, lean IT teams, and fewer cybersecurity resources. There’s also a common misconception that only large corporations need to worry about cyberattacks. The reality is quite different. A phishing […]