hxxps://mononapfp[.]sharepoint[.]com/:f:/document/INV-IgCx1X50pgUjR7iAjZL2fuQaAW4GfKVs6wHT3BYv9sgwW7g

Posts referencing this indicator

• ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365

  Cisco Talos

  Spoofed SharePoint anchor text displayed in phishing email visible link; impersonates legitimate vendor tenant mononapfp.com

  2026-07-01