The FBI has warned that hackers can now break into Microsoft Outlook, Teams, and 365 accounts without a password, after identifying a phishing tool known as Kali365 that has been circulating since April and is already being used to hijack user access.
The reports came after the FBI issued a public alert outlining how the tool works and why it poses a different kind of risk. Unlike conventional phishing attempts that rely on stolen passwords, Kali365 exploits Microsoft's own authentication system, meaning even users with multi-factor authentication enabled could still be exposed.
