Cybersecurity · 43 views
FBI warns of Kali365 phishing service targeting Microsoft 365 accounts
The FBI is warning about the Kali365 phishing-as-a-service platform (PhaaS) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass multi-factor authentication (MFA).
AI Summary
The FBI has issued a warning about Kali365, a phishing‑as‑a‑service platform that hijacks Microsoft 365 accounts. Kali365 exploits OAuth device‑code authentication to steal session tokens and bypass multi‑factor authentication. The service first appeared in April 2026 and is distributed through Telegram channels. Cybercriminals use it to compromise Microsoft 365 accounts without needing passwords or intercepted MFA codes. The FBI’s public service announcement highlights the platform’s emergence and distribution method.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedMore from Cybersecurity
Continue reading recent Cybersecurity coverage
- Reddit to lock content behind logins to fight scrapersContinue reading
- Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataContinue reading
- Syrian Hacker Gets Prison Time in US After Over a Decade on the RunContinue reading
- A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow