AI-Powered Phishing Attacks Surge 1,380% as Criminal Platforms Render MFA Obsolete

Imagine completing a two-factor authentication check on a real Microsoft login page and still handing a criminal full access to your email account. According to new research published this week by cybersecurity company Huntress , it happened across hundreds of organisations in the first four months of 2026 and the victims had no idea. The research, titled “ EvilTokens and the Rise of AI-Powered Phishing ,” documents a criminal phishing-as-a-service (PhaaS) platform th