{"id":218967,"date":"2026-05-23T02:15:05","date_gmt":"2026-05-23T06:15:05","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/05\/23\/fbi-warns-about-fast-growing-phishing-kit-targeting-microsoft-365-users\/"},"modified":"2026-05-23T02:15:08","modified_gmt":"2026-05-23T06:15:08","slug":"fbi-warns-about-fast-growing-phishing-kit-targeting-microsoft-365-users","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/05\/23\/fbi-warns-about-fast-growing-phishing-kit-targeting-microsoft-365-users\/","title":{"rendered":"FBI warns about fast-growing phishing kit targeting Microsoft 365 users"},"content":{"rendered":"<p><a href=\"https:\/\/cyberscoop.com\/fbi-phishing-kali365-microsoft365-access-tokens\/\">FBI warns about fast-growing phishing kit targeting Microsoft 365 users<\/a><\/p>\n<p><a href=\"https:\/\/cyberscoop.com\/fbi-phishing-kali365-microsoft365-access-tokens\/\">https:\/\/cyberscoop.com\/fbi-phishing-kali365-microsoft365-access-tokens\/<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-05-22 16:41:20<\/a><\/p>\n<p>Source Domain: <a href=\"cyberscoop.com\">cyberscoop.com<\/a><\/p>\n<p>The FBI has issued a public warning about the emergence of Kali365, a new phishing-as-a-service (PAAS) platform designed to exploit Microsoft 365 accounts by bypassing multi-factor authentication (MFA). This platform leverages device code authorization and phishing attempts that mimic widely recognized enterprise services. Once cybercriminals gain access through Kali365, they can execute various malicious activities including data theft, fraud, extortion, and ransomware attacks. Researchers argue that platforms like Kali365 are becoming increasingly popular primarily because they require little interaction from the victim and offer a seamless approach to gaining legitimate account access. These sophisticated tool kits lower the entry barrier for less-skilled attackers, providing access to phishing lures and capabilities for OAuth token capture. Despite being initially traced back to Telegram, researchers suspect the platform&#8217;s continued growth partly from its low cost and ease of use.<\/p>\n<p>Key Points:<br \/>\n&#8211; The FBI warns about Kali365, a growing PAAS platform bypassing MFA to retrieve Microsoft 365 access.<br \/>\n&#8211; It utilizes device code phishing that links malicious apps to legitimate accounts via single codes.<br \/>\n&#8211; Kali365 lowers the entry barrier for attackers, distributing AI-generated phishing lures and OAuth tokens.<br \/>\n&#8211; Researchers note an &#8211; The generated text has been blocked by our content filters.<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>FBI warns about fast-growing phishing kit targeting Microsoft 365 users https:\/\/cyberscoop.com\/fbi-phishing-kali365-microsoft365-access-tokens\/ Publish Date: 2026-05-22 16:41:20&#8230;<\/p>\n","protected":false},"author":1,"featured_media":218968,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2025\/02\/MattKapko.jpg?w=150&h=150&crop=1","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,31,25],"class_list":["post-218967","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-exploit","tag-phishing"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/218967"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=218967"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/218967\/revisions"}],"predecessor-version":[{"id":218969,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/218967\/revisions\/218969"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/218968"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=218967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=218967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=218967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}