Microsoft 365 Users Face OAuth Scam, Kali365 Bypasses MFA
This article explains Kali365, a new phishing-as-a-service attack that targets Microsoft 365 accounts by abusing device-code login flows and stealing OAuth tokens, why it can bypass multifactor authentication, and practical steps individuals and IT teams can take to detect, prevent, and recover from this kind of account takeover. Kali365 is a subscription service for crooks...