FBI warns of Kali365 as device code phishing soars:

bleepingcomputer.com/news/security/fake-openai-spacex-events-used-to-steal-microsoft-google-accounts/

Credibility A−

Nov 05

Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts: Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees ...

computerworld.com/article/4223889/ghostcode-attackers-abuse-device-codes-to-take-over-microsoft-365-accounts.html

Computerworld Sep 18

GhostCode attackers abuse device codes to take over Microsoft 365 accounts: A new phishing kit abuses a legitimate Microsoft device authorization flow intended ...

bleepingcomputer.com/news/security/new-phishing-kits-target-microsoft-365-accounts-evade-mfa/

Jul 14

New phishing kits target Microsoft 365 accounts, evade MFA: Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 ...

1 similar article

Business Standard

Jun 18

Is multi-factor authentication enough? Kali365 breach fuels security debate: Kali365 phishing kit: Cybercriminals are increasingly targeting active sessions ...

business-standard.com/technology/tech-news/is-multi-factor-authentication-enough-kali365-breach-fuels-security-debate-126061800764_1.html

thehill.com/policy/technology/5924655-microsoft-365-phishing-threat/

The Hill

Jun 15

FBI issues urgent Kali365 security warning for Teams, Outlook, OneDrive users: The FBI released an urgent security warning to the public about a fast-acting scam ...

kiplinger.com/personal-finance/gadgets/new-microsoft-scam-targets-outlook-and-microsoft-365-users

Kiplinger

Jun 04

New Scam Targets Microsoft Users, FBI Warns. Here's How to Protect Yourself: This phishing scam doesn't rely on a fake website. Instead, it tricks users ...

inc.com/amaya-nichole/fbi-just-issued-urgent-warning-anyone-using-microsoft-over-new-phishing-scheme/91351360

Inc.com

May 30

The FBI Just Issued an Urgent Warning for Anyone Using Microsoft Teams, Outlook, or OneDrive Over a New Phishing Scheme

hothardware.com/news/fbi-issues-urgent-warning-for-microsoft-365-users-kali365-phishing-kit-bypasses-mfa

Fort Worth Star-Telegram

B−

May 29

FBI Issues Urgent Warning For Microsoft 365 Users: Kali365 Phishing Kit Bypasses MFA

qz.com/fbi-kali365-phishing-microsoft-365-mfa-bypass-052626

Quartz

B+

May 26

FBI warned Microsoft 365 users about a new phishing tool that bypasses two-factor authentication

2 similar articles

VentureBeat

May 26

How attackers bypass MFA in financial services: Credential theft fell to 13% of breach vectors in 2026. Attackers now bypass MFA via help desk resets and OAuth ...

venturebeat.com/security/attack-dominating-financial-services-resets-mfa-steals-token

forbes.com/sites/zakdoffman/2026/05/25/fbi-warns-microsoft-users-new-attack-gains-access-to-accounts/

0 0

forbes.com

B−

May 26

FBI Warns Microsoft Users—New Attack Gains Access To Accounts: If you see one of these emails — check carefully, you may be under attack.

computerworld.com/article/4176466/fbi-warns-of-kali-oauth-stealers-2.html

Computerworld May 22

FBI warns of Kali Oauth stealers: A new phishing attack platform endangers Microsoft environments.

bleepingcomputer.com/news/security/fbi-takedown-of-w3ll-phishing-service-leads-to-developer-arrest/

Apr 13

FBI takedown of W3LL phishing service leads to developer arrest: The FBI Atlanta Field Office and Indonesian authorities have dismantled the "W3LL" ...

1 similar article

dlvr.it Apr 07

Hundreds of orgs compromised daily in Microsoft device code phishing attacks: : Who needs MFA when you've got EvilTokens?

theregister.com/2026/04/07/microsoft_device_code_phishing/

bleepingcomputer.com/news/security/when-attackers-already-have-the-keys-mfa-is-just-another-door-to-open/

Apr 09

When attackers already have the keys, MFA is just another door to open: Stolen credentials turn authentication systems into the attack surface ...

bleepingcomputer.com/news/security/hackers-target-microsoft-entra-accounts-in-device-code-vishing-attacks/

Feb 19

Hackers target Microsoft Entra accounts in device code vishing attacks: Threat actors are targeting technology, manufacturing, and financial organizations in ...