THREATOPS
THREAT OPSThreat News › Evil Is as Evil Does: New EvilTokens Affiliate Panel Uncovered

Evil Is as Evil Does: New EvilTokens Affiliate Panel Uncovered

medduo_decipherPublished 2026-07-01

<p class="wp-block-paragraph">Security researchers from <a href="https://blog.talosintelligence.com/artoken-inside-an-eviltokens-affiliate-panel-targeting-microsoft-365/">Cisco Talos</a> have detailed the emergence of ARToken, a recently deployed phishing-as-a-Service (PhaaS) platform designed specifically to exploit Microsoft 365 environments. </p>

<p class="wp-block-paragraph">This new operat

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://decipher.sc/2026/07/01/evils-is-as-evil-does-new-eviltokens-affiliate-panel-uncovered/