FBI Warns of Kali365 Phishing Service Targeting Microsoft 365 Account
In its latest alert, the Federal Bureau of Investigation (FBI) is warning about a new Phishing-as-a-Service (PaaS) platform called Kali365 that specifically targets Microsoft 365 accounts. The phishing platform was first detected in April 2026 and is offered on Telegram as a monthly subscription, allowing entry-level cybercriminals and crooks to get ready-made hacking tools for a fee.
The FBI’s alert came just days after Hackread.com reported on a similar Telegram kit called EvilTokens that uses fake login pages and Outlook calendar invites to steal Microsoft 365 sessions. Now, the emergence of Kali365 shows that such services are gaining popularity among newbie hackers.
How Kali365 Attack Works
A notable aspect of Kali365 attacks is that hackers do not need the victim’s password, as they use device code phishing to hijack active account sessions.
The attack begins with a phishing email supposedly sent by a well-known cloud or document-sharing service, but...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
