Threat Intelligence / Actor / eviltokensadmin

eviltokensadmin

Nation: N/A · 1 tracked threat(s) · Categories: PHISHING

Also known as: EvilTokens Operator, NOIRLEGACY GROUP

Tracked threats

EvilTokens: AI-Augmented Phishing-as-a-Service Platform Automating Microsoft 365 Device Code Phishing and BEC Fraud — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence