Full Breakdown
FBI Warns Kali365 Phishing-as-a-Service Platform Targeting Microsoft 365 Users in Florida
7/16/2026, 11:57:27 AM
Surge in Reported Losses
The FBI’s Internet Crime Complaint Center (IC3) noted that Florida residents reported more than $12 million in phishing-related losses in 2025, according to the agency’s 2025 Internet Crime Report. This figure represents a sharp increase from roughly $4 million reported the year before, highlighting a growing financial impact on the state’s users of Microsoft 365 services.
Nature of the Kali365 Service
Kali365 is described as a phishing-as-a-service platform that sells or provides ready-made phishing campaigns to criminal actors. The service specifically targets popular Microsoft 365 tools, including Outlook, Teams, and OneDrive, by sending deceptive emails or linking to malicious websites that mimic trusted sources. Victims are prompted to disclose passwords, financial data, or other sensitive information, enabling attackers to hijack accounts and siphon funds.
FBI Statements and Guidance
“Kali365 is yet another reminder that threat actors continue to adapt in a constantly shifting landscape,” said FBI Tampa Cybercrime Supervisory Special Agent Tim Callinan. He added that “Human behavior remains the most vulnerable point in any cybersecurity strategy.” The FBI emphasizes that organizations must provide continuous workforce training, enforce strong password standards, and, where feasible, mandate physical hardware tokens for multi-factor authentication.
Recommended Protective Measures
The FBI and IC3 advise individuals and businesses to:
- Avoid clicking links or opening attachments in unsolicited emails.
- Deploy physical hardware tokens for multi-factor authentication whenever possible.
- Report suspected phishing attempts or victimization to the IC3 at ic3.gov, enabling investigative and intelligence efforts and potentially aiding fund recovery.
These steps aim to reduce the risk of compromise as threat actors continue to refine phishing tactics through platforms like Kali365.
