CERT24FBI warns of Kali365 phishing service targeting Microsoft 365 accountsLoading data…
CERT24Threat Observatory
Period

FBI warns of Kali365 phishing service targeting Microsoft 365 accounts

The FBI warns about Kali365, a phishing-as-a-service (PhaaS) platform used to hijack Microsoft 365 accounts by abusing OAuth device-code authentication. The platform can steal session tokens and bypass multi-factor authentication (MFA).

← Back to intelligence

FBI warns of Kali365 phishing service targeting Microsoft 365 accounts

The FBI warns about Kali365, a phishing-as-a-service (PhaaS) platform used to hijack Microsoft 365 accounts by abusing OAuth device-code authentication. The platform can steal session tokens and bypass multi-factor authentication (MFA).