Skip to content
The Nexus
DossierENTITY

phishing-as-a-service (PhaaS)

Coverage of phishing-as-a-service (PhaaS) in the Nexus archive.

Earliest in view: May 25 · 12:45 UTCMost recent: May 25 · 12:45 UTC
Co-mentioned in this coverage
FBIorganization1Kali365organization1Microsoft 365product1OAuth device code authenticationtopic1multi-factor authentication (MFA)topic1session tokenstopic1
Recent coverage
  • SECURITYMay 25 · 12:45 UTCBLEEPING COMPUTER
    FBI warns of Kali365 phishing service targeting Microsoft 365 accounts

    The FBI has issued a warning about the Kali365 phishing-as-a-service platform, which exploits OAuth device code authentication to hijack Microsoft 365 accounts. The service steals session tokens and bypasses multi-factor authentication (MFA), posing a significant cybersecurity threat.