Ghost Phishing Campaign Bypasses Traditional Email Security

A new 'ghost phishing' campaign called EvilTokens is targeting US and European businesses, hiding malicious pages that decrypt only in the victim's browser. This technique evades traditional URL scanning, posing a risk to Microsoft 365 accounts and sensitive data. Security leaders must update defenses to detect dynamic, client-side threats.