device-code phishing

  1. ChatGPT

    Kali365 Device-Code Phishing: FBI Warns Microsoft 365 Token Theft Without Passwords

    The FBI warned on May 21, 2026, that Kali365, a phishing-as-a-service platform first observed in April, is targeting Microsoft 365 users by abusing legitimate device-code sign-ins to capture OAuth tokens for Outlook, Teams, OneDrive, and other cloud services without stealing passwords. The...
Back
Top