Security News New EvilTokens service fuels Microsoft device code phishing attacks BleepingComputer Daniel Bender 01 Apr 2026 A new malicious kit called EvilTokens integrates device code phishing capabilities, allowing attackers to hijack Microsoft accounts and provide advanced features for business email compromise attacks.