ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365

35 · Blog Talosintelligence · July 1, 2026, 10:13 a.m.
Summary
The blog post discusses the identification of the ARToken panel, a phishing-as-a-service (PhaaS) enterprise that shares similarities with the EvilTokens platform, outlining specific threats associated with its 80+ API endpoints targeting Microsoft 365 users. This analysis aims to enhance awareness regarding cybersecurity risks and malicious practices in the digital domain.