FBI Warns Kali365 Phishing Targets Microsoft
Analysis based on 27 articles · First reported May 21, 2026 · Last updated Jun 01, 2026
The Kali365 phishing campaign directly impacts Microsoft>>> and its users by compromising account security and potentially leading to data theft and financial fraud. This could lead to increased demand for cybersecurity solutions and services, benefiting companies in that sector. For Microsoft>>>, it could necessitate further investment in security features and potentially impact user trust if not effectively mitigated.
The United States — Federal Bureau of Investigation>>> (FBI) has issued a warning about Kali365, a new phishing-as-a-service (PhaaS) platform distributed primarily via Telegram>>>. First detected in April 2026, Kali365 enables cyber threat actors to bypass multifactor authentication (MFA) and gain persistent access to Microsoft>>> 365 environments by capturing OAuth tokens. The attack involves sending phishing emails with a device code and instructions to visit a legitimate Microsoft>>> verification page. Victims unknowingly authorize the attacker's device by entering the code, granting access to services like Outlook, Teams, and OneDrive without needing passwords or additional MFA. The FBI recommends restricting device code flow, blocking authentication transfers, and reporting incidents to the Internet Crime Complaint Center (IC3.gov). Bleeping Computer and Arctic wolf>>> have also reported on the increasing use of device code phishing.
Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.
Open Dashboard