News Article
HackRead: CalPhishing Scam Uses EvilTokens Kit, Outlook Invites to Steal M365 Sessions
Featuring Daud Jawad | Tue, 05/26/2026
Daud Jawad from the Fortra Intelligence and Research Experts (FIRE) team was featured in a recent HackRead article examining a new calendar‑based phishing campaign targeting Microsoft 365 users. The article draws on FIRE research to explain how attackers use malicious Outlook calendar invites and device code phishing to steal session tokens, bypass multi‑factor authentication, and gain persistent...