A single email can now open the door to an invisible cyber attack. The FBI has issued a warning over a dangerous phishing operation called Kali365, a scam designed to infiltrate Microsoft 365 accounts while bypassing multi factor authentication systems relied upon by millions of users worldwide.
According to the agency, hackers are exploiting legitimate Microsoft verification tools to gain long term access to Outlook, Teams, and OneDrive accounts. The technique allows attackers to remain inside accounts even after passwords are changed in some cases.