← Front PageThreat Intel Desk
Threat Intel
FBI warns of Kali365 phishing-as-a-service after April Microsoft 365 attacks
Kali365 phishing service exploits OAuth token persistence to maintain Microsoft 365 access despite password changes and MFA implementations.
Summary written by editorial AI · Source link below
The law enforcement agency published an advisory on Thursday about Kali365 — a Telegram-based service for cybercriminals that allows them to capture legitimate "OAuth" tokens enabling widespread access to Microsoft 365 environments.
Continue at the source
Read the full report at The RecordExternal link — opens at The Record in a new tab.
§
Continue with
More from the Threat Intel Desk
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking1d
- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot2d
- Trust Is Not What It Seems — And Fraudsters Are Counting on It3d
- AI Tools Are Generating Massive Attacks for Little Cost3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)3d