phishing
FBI warns of Kali365 phishing service targeting Microsoft 365 accounts
High
Summary
The FBI has issued a warning about Kali365, a phishing-as-a-service (PhaaS) platform, being used to target Microsoft 365 accounts. This platform leverages device code authentication to bypass multi-factor authentication (MFA) and gain unauthorized access to accounts, allowing attackers to steal data from various SaaS platforms. The FBI highlights the platform's accessibility to low-skilled attackers and recommends implementing security measures to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data