# FBI warns Microsoft users about passwordless scam

> **Newsylist Open Intelligence Dossier** · First detected: 2026-06-28 15:08 UTC · Category: Business · Sources: 5 · Current Velocity: 2.8

## Executive Summary
The FBI has issued a warning to Microsoft users regarding a passwordless scam as AI-powered phishing attacks surge.

## Intelligence Brief
The FBI is warning Microsoft users about a passwordless scam. This coincides with a reported 1,380% increase in AI-enabled attacks by the EvilToken Phishing-as-a-Service (PHaaS) group in 2026.


Coverage from TechRadar and IT Security Guru highlights that organized crime is operating like tech startups, using AI to make multi-factor authentication (MFA) obsolete. CyberSecurityNews reports that EvilToken hides its attack flow within the browser to expose gaps in static analysis, while Axios notes that phishing attacks are becoming significantly harder to detect.


Future developments center on the evolving capabilities of the EvilToken group and the impact of their browser-based attack flows on security analysis.

## Verified Facts & Key Claims
### What specific warning did the FBI issue?
The FBI warned Microsoft users about a passwordless scam.

### How much have AI-powered phishing attacks increased?
According to IT Security Guru and TechRadar, these attacks have surged by 1,380%.

### Which group is linked to these AI-enabled attacks?
The EvilToken Phishing-as-a-Service (PHaaS) group is identified as the actor behind the increase.

## Key People, Organizations & Locations
Microsoft, FBI, Organised, AI-enabled, AI-Powered Phishing Attacks Surge, Criminal Platforms Render MFA Obsolete, EvilToken PHaaS, EvilTokens Hides Its Attack Flow

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| IT Security Guru | AI-Powered Phishing Attacks Surge 1,380% as Criminal Platforms Render MFA Obsolete | 2026-06-28 13:53 | [Source Link](https://news.google.com/rss/articles/CBMiwAFBVV95cUxOMnRqYmJrUDRLYW1YQVBxU0NOOGdmQ3NxY3hqMnFLR09PbFRuaFBsX0pWVWtqcjhpT2ZmdzAxQ1N3MnQteWkyNjFoYmFGcXlHNHB1UHdUVlV2RW1nVFlNZGJyNHFYVWp1UkxPN2VUYWVKMGlzS19YZHVwTy1NTFl3RkE5MlJydzU5TEZWUVR1UjdSZkFOck5lY3BXMi1WdktkbWpaMWxKUkhSMlJHSS1wUnUxeWVBU1I2Mk5jY3YwalM?oc=5) |
| TechRadar | 'Organised crime operating like a tech startup': EvilToken PHaaS group ramp up AI-enabled attacks by 1,380% in 2026 | 2026-06-28 13:53 | [Source Link](https://news.google.com/rss/articles/CBMi7wFBVV95cUxQVEJBcWRTUkdTU3pfbnFrcGdNbFRPRkZCUWlURzlNM2hLX190UmNHdm1XVkJEaUowRnU2ak45dG9xbk1HX2tOVmstOW0zcGRpSnplZklPdkNNVmRPVlFVeU9NRE1QS0V1WmtBVE55VGdEMEcwUnBDNVRDVUFUbExOWWltaVJWVGhkMHlaRkJsUk00Sk9ucHZnenJkWVpSX1BjeHIwOWlyVUc1UGp3T21DUk1hX1pPQkpRZ0NobmpBZ1pMU0N4ZmdnYWloX2JGQk9yUk4yRXlyRlhYOVFBOExFMkw3SF9ocV9LN0pPTDdYRQ?oc=5) |
| CyberSecurityNews | EvilTokens Hides Its Attack Flow in the Browser, Exposing Static Analysis Gaps | 2026-06-28 13:53 | [Source Link](https://news.google.com/rss/articles/CBMihAFBVV95cUxNdW55WXZnZzVuU05yWWVnMmNoamg3eTE3Q2RGdFdKQVZCc3Bkak9zbDNDSjBHQVV1eHp1d01ta1FacVpydnRWZ3J0UlQwNDlQbGdWTFhwQnRiRVNNM0lWV1BGMHU3cUpDNFFFbG85S2JkLXR5ekRfcGVUWTFHVndfMVk3ZDHSAYoBQVVfeXFMUDhWRndHNVpTaTJFMlRnaXBYTmx5My12VWFId05aRzBBd3NTdndiWG16SlV6cnRMaXc1R1JJa180N0lrVzBBSThLLXJSVTFkOUlHdks0WVdrd3NSODhsdjdwdWVqUmtsdG04UE9uWTdQSFJ4OHh4VkJiejNiLXJHOE5mV1c2aUNmS0xB?oc=5) |
| Axios | Why phishing attacks are suddenly getting much harder to spot | 2026-06-28 13:53 | [Source Link](https://news.google.com/rss/articles/CBMiekFVX3lxTE9EUGxaX2ExS29vOVdxX0lUZ01MQmtKREFaNUlfQ3hud0x1d1p2S1JwS2ItdFJQeFhDR3FzRjdnNjB6cDAzV2NrWnFjV1J2TmNvWFVHZGFOY2kyNUxQYUJ3TmYzRGpZWi03TTNQSzMya0JHZGh0WGF3VHRB?oc=5) |
| Fox News | FBI warns Microsoft users about passwordless scam | 2026-06-28 13:53 | [Source Link](https://news.google.com/rss/articles/CBMifEFVX3lxTE1qa3RZZjdLRWtCZjR2d3JUUk9RYWxBcm5OMTB6bXc5NndDTXJjbFkxUl9XY2FuVXAtcVFLZnFJY3pua3lhSDllMlZFNm9NVngwbVBEWWwzaHRwZk5DVXVDV3N0NGplMGdER1NmVllack9zZG51ZThxRUwzQ0s?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-06-28/fbi-warns-microsoft-users-about-passwordless-scam*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*