Catch-IT: New Kali365 phishing kit bypasses MFA and steals Microsoft logins
The FBI has put out a warning about “Kali365,” a phishing‑as‑a‑service (PhaaS) platform that helps even low‑skilled attackers hijack Microsoft 365 accounts by stealing access tokens instead of passwords. Although early reporting focuses on attacks against organizations, the underlying technique works just as easily against individual Microsoft 365 users who [...]










