Skip to content
Auto-CTI
Back to all actors

EvilTokens

Unknown Active
Mentions
1
First seen
08 Jul 2026
Last seen
08 Jul 2026

Relevant to you · Relevant

Threat focus:
phishing / becindustrial / ot espionage
Sector / region:
Manufacturing

Origin

Unattributed

Profile

EvilTokens is a threat actor linked to a new wave of ghost phishing attacks that bypass traditional email security measures. These attacks likely aim to compromise credentials or tokens. The recent campaign highlights the evolving tactics used to infiltrate email systems.

Affected vendors

Microsoft

Activity (8 weeks)

22
23
24
25
26
27
28
29

Recent activity

ESC