EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

Microsoft's Digital Crimes Unit led a disruption of the EvilTokens Phishing-as-a-Service platform, which had compromised over 12,000 Microsoft accounts across more than 10,000 organizations. The takedown removes a significant credential-harvesting infrastructure, though residual access and copycat operations may persist. This marks a notable enforcement action against a scalable cybercrime service.