FBI warns of Kali365 phishing-as-a-service after April Microsoft 365 attacks

The law enforcement agency published an advisory on Thursday about Kali365 — a Telegram-based service for cybercriminals that allows them to capture legitimate "OAuth" tokens enabling widespread access to Microsoft 365 environments.

Source: The Record