Covered by 8 sources including How-To Geek, Hackaday

The FBI is warning about the Kali365 phishing-as-a-service platform (PhaaS) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass multi-factor authentication (MFA). [...]

Sign in to keep reading the full article.

Sign Up Log In

Covered in 8 articles

How-To Geek·

Hackers are using real Microsoft login pages to steal accounts, the FBI warns

Hackaday·

This Week in Security: Ubiquiti Fixes, and FreeBSD Joins the Club you Don’t Want to Join

sh.itjust.works·

FBI warns of Kali365 phishing service targeting Microsoft 365 accounts

View all 8 ›