The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication using device code tricks.

A fast-spreading cyberattack kit called ‘Kali365’ allows low-skill scammers to hijack a user’s account without ever stealing their password. The security measure millions rely on to protect their ...

The FBI is warning Microsoft 365 users about a new phishing scam called Kali365 that can bypass passwords and multifactor authentication.

The FBI warns of a phishing campaign targeting Microsoft 365 users, exploiting OAuth authentication to bypass security measures, potentially exposing millions to account takeovers.