EvilTokens
Narrative intelligence for EvilTokens: 2 tracked articles, claims, and spin patterns across AI and technology coverage.
Related Articles
New Ghost Phishing Wave Is Breaking Traditional Email Security
A new 'ghost phishing' technique used in an EvilTokens campaign evades traditional email security by delaying malicious payload decryption until execution inside the victim's browser, creating a detection gap for URL-based filters.
Jul 9, 2026
ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit
A newly identified phishing-as-a-service platform named ARToken, linked to the EvilTokens operation, reveals an advanced, modular toolkit targeting Microsoft 365 accounts — highlighting evolving adversary infrastructure and detection challenges.
Published Jul 3, 2026 · Analyzed Jul 7, 2026
Related Claims
01 This 'ghost phishing' technique keeps the malicious page hidden until it decrypts and comes to life inside the victim’s browser.
02 ARToken appears to operate as an affiliate of the EvilTokens phishing platform
Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO