Microsoft disrupts EvilTokens phishing-as-a-service, seizes 50 sites

Microsoft took down 50 websites and disabled 150+ domains linked to EvilTokens, a phishing-as-a-service platform targeting Microsoft 365 accounts. The takedown is part of an ongoing crackdown on credential-harvesting infrastructure, but the operators may quickly rebuild. This highlights persistent cyber threats to enterprise authentication systems.