Eviltoken

How are you defending against EvilToken-style device code phishing?

We've had several near-breaches involving an EvilToken-style attack. A compromised account sends convincing messages to everyone in the victim's address book, often linking to a legitimate-looking SharePoint site.…

How are you mitigating Eviltoken-style SharePoint and MFA phishing?

We've had several near-breaches involving a phishing technique where a compromised account emails everyone in the victim's address book. The message links to a legitimate SharePoint site, but…