AI Summary

A recent EvilTokens campaign has revealed a new “ghost phishing” technique that targets businesses in the United States and Europe. The method keeps the malicious page hidden until it decrypts and becomes visible inside the victim’s browser. This approach exploits a blind spot in traditional email security systems that do not detect the page until it is activated. The campaign demonstrates how attackers can bypass standard email filters by delaying the malicious content’s appearance until the user interacts with it.

AI summaries can be wrong sometimes—always verify important details using the source article.