MUST READ

EvilTokens made phishing-as-a-service look easy. Then it got taken down

 | 

Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools

 | 

CVE-2026-87902: how close is your WordPress to remote code execution?

 | 

Check Point Fixes a New Actively Exploited Critical Security Flaw

 | 

Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day

 | 

Public PoC Exposes Critical Veeam Agent Privilege Escalation

 | 

U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog

 | 

Contagious Interview: 30,000 devices infected by a fake job interview

 | 

Google Fined €403 Million Over Location Data Practices

 | 

Foreign Hackers Target Two Colorado Water Utilities

 | 

ChainScript: the RAT that hides its command server inside a blockchain contract

 | 

A BYD Shark 6 Hack Shows the Risks of Connected Cars

 | 

The Target Is No Longer the Model. It’s the Agent.

 | 

UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns

 | 

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

 | 

AI Hallucinations Nearly Triggered a US-China Military Confrontation

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115

 | 

Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Google Gemini also Broke Out of Its Test Environment

 | 

AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum

 | 

EvilTokens

Pierluigi Paganini September 23, 2026
EvilTokens made phishing-as-a-service look easy. Then it got taken down

Microsoft, Coinbase and law enforcement took down EvilTokens, a phishing kit that compromised 12,000 inboxes through device-code phishing and AI. EvilTokens showed up in February 2026 and moved fast. Within months it had compromised more than 12,000 inboxes across over 10,000 organizations. Microsoft says the EvilTokens platform, operated by Storm-2992, is a phishing-as-a-service kit sold […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

EvilTokens made phishing-as-a-service look easy. Then it got taken down

Cyber Crime / September 23, 2026

Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools

Malware / September 23, 2026

CVE-2026-87902: how close is your WordPress to remote code execution?

Hacking / September 23, 2026

Check Point Fixes a New Actively Exploited Critical Security Flaw

Security / September 22, 2026

Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day

Hacking / September 22, 2026