Jul 92026 New Ghost Phishing Wave Is Breaking Traditional Email Security EvilTokens uses AES-GCM encrypted HTML and Microsoft Device Code Phishing to hide Microsoft 365 account takeover pages until browser render.