Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attackercontrolled device codes that victims approve on Microsoft's real authentication page. Once access and refresh tokens are issued, attackers may retain access to email, documents, and cloud resources, creating a direct path to data exposure, financial fraud,.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity