How Hackers Steal Your Microsoft 365 Session | Sophos Threat Case

Nov 3, 2026

Most phishing attacks go after credentials. Evil Tokens targets something more powerful: an already authenticated Microsoft 365 session.

Watch Marlene Jones break down how session theft works and how Sophos MDR stopped this real-world attack before the stolen token could be abused.

Learn more about this real world attack: https://www.sophos.com/en-us/resources/mdr-threat-cases/m365-credential-stuffing-stopped-in-63-seconds