FBI Warns 'Kali365' Phishing Kit Hijacks Microsoft 365 OAuth Tokens (infosecurity-magazine.com)

• Kali365 is a phishing-as-a-service platform targeting Microsoft 365 OAuth tokens.
• The platform bypasses multi-factor authentication, lowering the barrier for attackers.
• FBI recommends monitoring OAuth integrations and user awareness training.

"The FBI issued a warning about the Kali365 phishing-as-a-service platform that enables attackers to steal Microsoft 365 OAuth tokens. The platform lowers the barrier to entry for cybercriminals by providing ready-made phishing campaigns and multi-factor authentication bypasses. Organizations using Microsoft 365 are advised to monitor OAuth integrations and revoke suspicious permissions."