New Ghost Phishing Wave Is Breaking Traditional Email Security
EvilTokens uses AES-GCM encrypted HTML and Microsoft Device Code Phishing to hide Microsoft 365 account takeover pages until browser render.
More info