The FBI is warning about the Kali365 phishing-as-a-service platform (PhaaS) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass ...

The FBI is warning that a new hacking platform is allowing cybercriminals to hijack Microsoft 365 accounts — including Outlook, Teams and OneDrive — while bypassing multi-factor authentication ...

A new phishing-as-a-service (PhaaS) platform called Kali365 is being distributed in the wild, primarily via Telegram, the FBI has warned. First detected in April 2026, Kali365 provides cyber threat ...

The security measure millions rely on to protect their accounts may not be as foolproof as they think. At the center of the scheme is a hacking platform called Kali365. Unlike traditional phishing ...

The FBI released an urgent security warning to the public about a fast-acting scam targeting Microsoft 365 users on Teams, Outlook and OneDrive. The agency warned that the hacking platform Kali365 ...

You likely use Microsoft 365 for your personal home office needs or are required to use the platform at work. Microsoft 365 now powers work and email for hundreds of millions of people and millions of ...

The Federal Bureau of Investigation (FBI) issued a Public Service Announcement (PSA), warning the public about an emerging Phishing1-as-a-Service2 (PhaaS) platform called Kali365. First seen in April ...

The operators of Kali365, a phishing-as-a-service platform that drew considerable attention for helping attackers bypass multifactor authentication (MFA) on Microsoft 365 accounts, have significantly ...

The FBI warned that Kali365 can hijack Microsoft 365 accounts by abusing device code authentication and capturing OAuth tokens. A new phishing service is turning a legitimate Microsoft login process ...

The Federal Bureau of Investigation (FBI) has issued a public warning about a newly identified cybercrime platform called Kali365, a “Phishing-as-a-Service” (PhaaS) toolkit that is being used to ...