The FBI has issued a warning about Kali365, a new Phishing-as-a-Service platform enabling attackers to steal Microsoft 365 OAuth tokens and bypass MFA. This platform lowers the barrier for cybercriminals, providing AI-generated lures and automated campaign tools. Users are advised to restrict device code flow and implement conditional access policies to protect their accounts.
The FBI has issued a warning about Kali365, a new Phishing-as-a-Service platform enabling attackers to steal Microsoft 365 OAuth tokens and bypass MFA. This platform lowers the barrier for cybercriminals, providing AI-generated lures and automated campaign tools. Users are advised to restrict device code flow and implement conditional access policies to protect their accounts.
<iframe src="https://hindustansphere.com/embed/cluster/39c1b9882a2157295cbb30aa143ca41c5a50944c" width="100%" height="320" style="border:0;max-width:680px" loading="lazy" title="FBI warns Microsoft users of Kali365 scam duping thousands"></iframe>
