#ParsedReport #CompletenessMedium
02-09-2026

Inside Knight Office, a New M365 AiTM Phishing Kit

https://www.huntress.com/blog/inside-knight-office-m365-aitm-attack

Report completeness: Medium

Threats:
Knight_office_tool
Aitm_technique
Eviltokens_tool
Kali365_tool
Device_code_phishing_technique
Spear-phishing_technique

Victims:
Microsoft 365 users, Google workspace users

TTPs:
Tactics: 7
Technics: 10

IOCs:
IP: 2
Domain: 26

Soft:
Cloudflare Turnstile, Joomla, Microsoft Entra, Windows Hello, Flask, Microsoft Sharepoint

Languages:
python