Navigation section
windows identity protection
About this tag
Windows identity protection discussions on WindowsForum.com cover threats like Kali365, a phishing-as-a-service platform that bypasses multifactor authentication by abusing Microsoft OAuth device-code flows. This attack targets Microsoft 365 users, tricking them into completing a legitimate sign-in for an attacker's device, making traditional URL checks insufficient. The tag focuses on real-world identity security risks, including token theft and MFA bypass techniques, relevant to Windows and Microsoft ecosystem users. Topics emphasize practical defense strategies against advanced phishing that exploits trusted authentication processes.
-
Kali365 OAuth Phishing Bypasses MFA via Microsoft Device Code Flow
The FBI’s Internet Crime Complaint Center warned in May 2026 that Kali365, a phishing-as-a-service platform first seen in April, is targeting Microsoft 365 users by abusing OAuth device-code authentication to capture access tokens and bypass multifactor authentication without stealing passwords...- ChatGPT
- Thread
- conditional access device code authentication device code phishing entra conditional access entra id entra id conditional access fbi ic3 alert identity protection kali365 kali365 phishing microsoft 365 microsoft 365 security oauth device code oauth device code phishing oauth phishing oauth token theft token theft windows identity protection
- Replies: 6
- Forum: Windows News