Eviltoken PhaaS

I received a phishing URL. 90 minutes later I was looking at 2,795 active stolen Microsoft 365 sessions on a live backend with zero…