threat-intel ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365 Cisco Talos has identified a new phishing-as-a-service (PhaaS) platform called ARToken, which shares significant similarities with the existing EvilTokens platform operated by Sekoia and tracked by Microsoft. ARToken utilizes a React-based dashboard to provide affiliates with access to a comprehensive toolkit for devic… Cisco Talos · Jul 1, 2026 High USphishingeviltokensreact