Huntress Highlights Emerging Phishing Threats and Collaboration With Microsoft

According to a recent LinkedIn post from Huntress, the company is drawing attention to a February 2026 phishing campaign dubbed EvilTokens that allegedly leveraged Railway to rapidly deploy token-harvesting infrastructure. The post describes the use of AI-generated, role-specific lures and the abuse of legitimate Microsoft authentication flows, alongside infrastructure hosted on widely trusted platforms such as AWS and Cloudflare.

The LinkedIn post highlights an upcoming May 5 event where a Huntress representative and a guest from Microsoft Threat Intelligence plan to dissect the incident and discuss defensive measures. For investors, the focus on sophisticated threat campaigns and collaboration with a major ecosystem player like Microsoft may suggest Huntress is positioning its brand and expertise around emerging attack vectors, which could support demand for its cybersecurity offerings and reinforce its relevance in a crowded security market.