
The Phishing Scam That Asks Your Employees to Type a Code, and How to Block It
Microsoft links a phishing service called EvilTokens to more than 12,000 compromised inboxes. It worked by getting people to type a short code into a real Microsoft page. Here is how the trick works, why MFA did not stop it, and the setting that blocks it.