FBI warns of Kali365 phishing service targeting Microsoft 365 accounts

By Lawrence Abrams

The FBI is warning about the Kali365 phishing-as-a-service platform (PhaaS) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass multi-factor authentication (MFA). [...]

Read full article at BleepingComputer

More from BleepingComputer

WhatsApp rolls out new feature that flags potential scam messages 5 hours ago "City-Forum" data-theft attacks target Salesforce, ServiceNow portals 18 hours ago Android malware combo takes out loans and relays victims' credit cards 18 hours ago Hackers exploit critical Adobe Commerce flaw to hijack customer accounts 20 hours ago Hundreds of fake Chrome VPN extensions route traffic through a proxy 22 hours ago