EvilTokens device-code phishing: what Microsoft account holders should do
Microsoft disrupted EvilTokens, an AI-assisted phishing kit that tricked people into entering device codes on the real Microsoft sign-in page. How it looks for Outlook.com users, what not to do, and how to check recent activity.