The FBI warns Microsoft 365 services are being bombarded with new phishing emails — here are 3 steps you can take to stay safe

Back view of hooded internet criminal hacking laptop in the dark, stealing credit card details.

The FBI has warned of a new Phishing-as-a-Service (PhaaS) kit that is targeting Microsoft 365 accounts in a complex but easily accessible campaign.

The Kali365 PhaaS service allows hackers to gain persistent access to Microsoft 365 environments by stealing ‘OAuth’ tokens using AI-generated phishing emails that direct users to legitimate Microsoft verification pages.