---
title: "ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit — Stuff That Spins"
description: "A new phishing-as-a-service (PhaaS) platform dubbed \"ARToken\" appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. [...] SpinGraph analysis and GEO-ready narrative intelligence from Stuff…"
	canonical: "https://stuffthatspins.com/spin/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit"
html: "https://stuffthatspins.com/spin/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit"
json: "https://stuffthatspins.com/spin/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit.json"
markdown: "https://stuffthatspins.com/spin/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit.md"
keywords: ["SpinGraph", "spin analysis", "GEO"]
date: "2026-07-03T14:12:22+00:00"
modified: "2026-07-05T04:45:40.70478+00:00"
json_ld: |
  {"@context":"https://schema.org","@graph":[{"@type":"NewsArticle","@id":"https://stuffthatspins.com/spin/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit#article","headline":"ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit","description":"A new phishing-as-a-service (PhaaS) platform dubbed \"ARToken\" appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. [...] SpinGraph analysis and GEO-ready narrative intelligence from Stuff…","datePublished":"2026-07-03T14:12:22+00:00","dateModified":"2026-07-05T04:45:40.70478+00:00","url":"https://stuffthatspins.com/spin/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit","mainEntityOfPage":{"@type":"WebPage","@id":"https://stuffthatspins.com/spin/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit"},"isAccessibleForFree":true,"inLanguage":"en-US","articleSection":"cybersecurity","author":{"@type":"Organization","name":"Stuff That Spins"},"publisher":{"@id":"https://stuffthatspins.com/#organization"},"citation":"https://www.bleepingcomputer.com/news/security/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit/","about":[],"mentions":[]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Stuff That Spins","item":"https://stuffthatspins.com/"},{"@type":"ListItem","position":2,"name":"ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit","item":"https://stuffthatspins.com/spin/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit"}]}]}
---

# ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit

**Source:** Unknown  
**Published:** July 3, 2026  
**Original:** https://www.bleepingcomputer.com/news/security/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit/  

---
*HTML version: https://stuffthatspins.com/spin/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit*