FBI warns Kali365 phishing kit is stealing Microsoft OAuth tokens at scale

The FBI has issued a warning about a phishing kit called "Kali365" that is being used to steal Microsoft OAuth tokens on a large scale. This crimeware bypasses multi-factor authentication (MFA) by tricking users into granting attackers access to their Microsoft 365 accounts. The stolen tokens allow attackers to maintain persistent access without needing passwords.

MOST POPULAR EVENTS - The Hardware Crunch: How Supply Chain Turbulence Is Forcing a New IT Playbook Infrastructure teams are facing a perfect storm: extended hardware lead times, rising costs driven by AI demand, and accelerated platform timelines. - Overcoming the trade-offs in data sovereignty What does data sovereignty actually mean for your network, which trade-offs are unavoidable? Learn more. - From Prompt to Exploit: How LLMs Are Changing API Attacks Modern applications are API-driven, interconnected, and often over-permissioned, making them an ideal target for AI-assisted attacks. - Architecting the Future: Unlocking Enterprise Data Services for Kubernetes Join us to discover how to eliminate infrastructure silos and establish a standardized, enterprise-grade cloud-native platform. - Catch the Advanced Attacks Microsoft 365 Misses with Behavioral AI Security Microsoft 365 is the backbone of enterprise communication, and its native security filters out the known and the noisy. - How Agents are Reshaping AI Security AI adoption is accelerating and with it comes a new security challenge. - How Agents are Reshaping AI Security AI adoption is accelerating and with it comes a new security challenge. - AI Found the Problem. Now What? AI is transforming the software development lifecycle, helping teams identify and remediate vulnerabilities before they reach production. - Virtual Cyber Recovery Sim Step into the chaos of a live ransomware breach, test your response skills, and team up with other IT and security pros to outsmart cybercriminals - Virtual Cyber Recovery Simulation Ransomware attacks aren’t slowing down, and neither are we. Druva’s hit event, Escape Ransomware, is now fully virtual. AI - Science SpaceX scrubs Starship launch with seconds to go Not all bad news: Crypto billionaire signs up for a mission to Mars - ZTE unveils localized roadmap for Eurasia's digital future at GSMA M360 Eurasia 2026 Driving "affordable AI" through open ecosystems, anti-fragile infrastructure, and optimized TCO to empower local industries - On-Prem Outlook has an image problem Microsoft says classic client may lose embedded pictures thanks to wrapping bug - security Techie claims Trump Mobile website was leaking thousands of people's data Customers' info potentially handed to anyone who could send an HTTP request - Public sector Irish Rail writes down €50M after train IT project goes off the rails State-owned operator loses confidence in delayed traffic management system as politicians compare Ireland’s latest public-sector IT fiasco to 'Groundhog Day' Infosec - Science SpaceX scrubs Starship launch with seconds to go Not all bad news: Crypto billionaire signs up for a mission to Mars - ZTE unveils localized roadmap for Eurasia's digital future at GSMA M360 Eurasia 2026 Driving "affordable AI" through open ecosystems, anti-fragile infrastructure, and optimized TCO to empower local industries - On-Prem Outlook has an image problem Microsoft says classic client may lose embedded pictures thanks to wrapping bug - security Techie claims Trump Mobile website was leaking thousands of people's data Customers' info potentially handed to anyone who could send an HTTP request - Public sector Irish Rail writes down €50M after train IT project goes off the rails State-owned operator loses confidence in delayed traffic management system as politicians compare Ireland’s latest public-sector IT fiasco to 'Groundhog Day' FOSS - FBI warns Kali365 phishing kit is stealing Microsoft OAuth tokens at scale MFA? No problem, says crimeware that tricks users into handing attackers the keys to M365 - ZTE Day Indonesia 2026 strengthens AI innovation and digital infrastructure collaboration to accelerate Indonesia's digital transformation The annual tech showcase highlights next-gen AI, cloud, and future-ready ICT solutions while uniting ecosystem partners to build the foundation for the nation's AI era - SpaceX scrubs Starship launch with seconds to go Not all bad news: Crypto billionaire signs up for a mission to Mars - ZTE unveils localized roadmap for Eurasia's digital future at GSMA M360 Eurasia 2026 Driving "affordable AI" through open ecosystems, anti-fragile infrastructure, and optimized TCO to empower local industries - Outlook has an image problem Microsoft says classic client may lose embedded pictures thanks to wrapping bug - Techie claims Trump Mobile website was leaking thousands of people's data Customers' info potentially handed to anyone who could send an HTTP request FEATURES - Europe built sovereign clouds to escape US control. Then forgot about the processors - Nobody believes the 'criminals and scumbags' who hacked Canvas really deleted stolen student data - Europe wants out from under US tech – but first it has to find the exits - GNOME may rule Ubuntu Resolute Raccoon, but X.org isn't roadkill yet - OpenClaw, but in containers: Meet NanoClaw - Open source registries don't have enough money to implement basic security - Contain your Windows apps inside Linux Windows - The Linux mid-life crisis that's an opportunity for Tux-led transformation - Too much AI for some, too little for others: Why AMD can't win with investors - How agentic AI can strain modern memory hierarchies