FBI sounds alarm on phishing tool that steals Microsoft 365 accounts without passwords

The feds say that Kali365 makes it easy for even amateur hackers to run advanced phishing scams that used to require serious ...

One Email Could Give Hackers Access To Your Microsoft Account: FBI Warns They Don't Even Need Your Password

The FBI warns of Kali365, a phishing scam exploiting Microsoft 365 verification tools to bypass security, granting hackers ...
Homeland Security Today

FBI Warns Phishing Kit is Bypassing Microsoft Multi-Factor Authentication Through OAuth Token Hijacking

The Federal Bureau of Investigation (FBI) has issued a Public Service Announcement (PSA) to warn the public about an emerging ...

FBI warns of Kali365 phishing service targeting Microsoft 365 accounts

The FBI is warning about the Kali365 phishing-as-a-service platform (PhaaS) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass ...