#eviltokens — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #eviltokens, aggregated by home.social.
-
Notion Abused to Harvest Authentication Tokens in Targeted Attacks
Researchers uncovered a sneaky phishing campaign where attackers abused Notion to steal authentication tokens, using free accounts to impersonate senior executives and send legit-looking document-sharing notifications. This clever tactic was linked to two phishing-as-a-service platforms and over 600 malicious scripts.
#Phishingasaservice #Eviltokens #Tycoon2fa #CollaborationPlatformAbuse #Notion
-
#EvilTokens ist ein #Phishing-as-a-Service Kit, um die #0Auth #Authentifizierung von #Microsoft #Konten über die Geräteautorisierung zu unterlaufen. Hatte ich so nicht auf dem Radar - Unternehmen und deren IT sollten reagieren.