Story perspectives

FBI Flags AI-Powered Kali365 Phishing Service Targeting Microsoft 365

6/16/2026

50 7

Summary

FBI Warns Phishing

FBI warned that Kali365 phishing-as-a-service is targeting U.S. Microsoft 365 users.
Kali365 captures OAuth device codes to bypass multifactor authentication without passwords.
The service sells for $250 monthly and uses AI to craft phishing messages, automate campaigns, and track targets.
FBI urged users to report phishing emails, suspicious logins and unauthorized devices to the Internet Crime Complaint Center and avoid unsolicited links with access codes.

Summary

**FBI Advises**

The FBI urges organizations to block the “device code flow” in Microsoft 365 through conditional-access policies to stop Kali365’s token-capture technique.
Companies are instructed to scan for and terminate any unauthorized active sessions in their Microsoft 365 environments as evidence of compromise.
Victims are advised to file a complaint with the Internet Crime Complaint Center, supplying details such as suspicious logins, phishing emails and proof of the unauthorized sessions.

1 of 2

FBI Warns Phishing

FBI warned that Kali365 phishing-as-a-service is targeting U.S. Microsoft 365 users.
Kali365 captures OAuth device codes to bypass multifactor authentication without passwords.
The service sells for $250 monthly and uses AI to craft phishing messages, automate campaigns, and track targets.
FBI urged users to report phishing emails, suspicious logins and unauthorized devices to the Internet Crime Complaint Center and avoid unsolicited links with access codes.

1 / 2