[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-eviltokens-phishing-service-surged-1380-in-early-2026":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":24,"persona_id":22,"persona_name":22,"section":25,"tags":26,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},2121,"eviltokens-phishing-service-surged-1380-in-early-2026","EvilTokens Phishing Service Surged 1,380% in Early 2026","A Huntress report details how the EvilTokens phishing-as-a-service operation used AI to scale personalized attacks and bypass MFA.","A phishing operation sold on Telegram for as little as $600 a month grew its attack volume by 1,380% in the first four months of 2026.\n\nCybersecurity firm Huntress tracked the group behind a phishing-as-a-service platform called EvilTokens and found attacks spiked dramatically between January and April 2026 compared to the July–December 2025 baseline. More than half of detected incidents tied to two coordinated waves. The service runs on a three-tier subscription model priced at $600, $1,000, and $1,500, and it is advertised openly on Telegram. It is also capable of bypassing multi-factor authentication — the control most organizations treat as a last line of defense.\n\nWhat makes EvilTokens notable is not just the scale but the AI-driven personalization baked in. Huntress found that across hundreds of incidents, no two phishing lures were identical — a level of customization that previously required manual effort from skilled attackers. That barrier is now gone; any operator with a few hundred dollars can run campaigns indistinguishable from targeted, hand-crafted attacks. For defenders, volume and personalization arriving together is the harder problem.\n\nThe $600 entry price looks steep until you account for the economics: a single successful credential theft can fetch far more on secondary markets, and ransomware negotiations routinely climb into the millions. PhaaS groups have long existed, but EvilTokens represents the next stage — AI as a product feature, not an experiment.","[\"phishing\",\"cybercrime\",\"ai\",\"security\"]","2026-06-24T12:15:00.000Z","2026-06-24T12:59:57.109Z","2026-06-24T13:00:07.973Z","published",null,[],"https:\u002F\u002Fcdn.xyz.onl\u002Farticle-images\u002Feviltokens-phishing-service-surged-1380-in-early-2026.webp","security",[27,28,29,25],"phishing","cybercrime","ai",[31],{"name":32,"url":33},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Forganised-crime-operating-like-a-tech-startup-eviltoken-phaas-group-ramp-up-ai-enabled-attacks-by-1-380-percent-in-2026",0,{"sections":36},[37,41,46,50,55,60,65,70,75,80,85,90,95,100],{"name":38,"slug":29,"count":39,"latest_published_at":40},"AI",538,"2026-06-24T15:15:00.000Z",{"name":42,"slug":43,"count":44,"latest_published_at":45},"Deals","deals",161,"2026-06-24T13:00:00.000Z",{"name":47,"slug":25,"count":48,"latest_published_at":49},"Security",148,"2026-06-24T17:25:00.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Policy","policy",103,"2026-06-24T13:35:19.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Consumer Tech","consumer-tech",87,"2026-06-24T14:22:56.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Hardware","hardware",78,"2026-06-24T16:15:10.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Software","software",64,"2026-06-24T16:15:00.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Dev Tools","dev-tools",53,"2026-06-23T18:13:40.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Science","science",39,"2026-06-23T05:25:16.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Gaming","gaming",36,"2026-06-24T15:05:01.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Startups","startups",31,"2026-06-24T16:48:43.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"General","general",27,"2026-06-24T08:50:14.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]