Kali365 Phishing Kit Exploits Microsoft Device Code Flow to Target US Enterprises
Kali365, a device code phishing kit, is actively targeting US organizations by abusing Microsoft's legitimate authentication flow. According to ANY.RUN telemetry, the…
Tag: Kali365
Device Code Phishing: The Fastest-Growing Threat of 2026 and How to Defend Against It
Device code phishing, which abuses the OAuth 2.0 device authorization grant to steal access tokens, has rapidly evolved from a niche technique…
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation called Forg365 is targeting Microsoft 365 accounts using device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, AI-assisted…
Kali365: Device Code Phishing Kit Abusing Microsoft Authentication
Kali365 is a device code phishing kit that targets US organizations by abusing legitimate Microsoft authentication. It lures victims with pages impersonating…
OctoLink Live (Kali365 Live) Desktop Application
OctoLink Live is a desktop application used with Kali365 to launch Chromium browser sessions and access victim mailboxes in OWA, OneDrive, SharePoint,…
OctoLink Sender Bulk Email Tool
OctoLink Sender is a tool used with Kali365 to mass-send phishing emails from compromised accounts to contacts, enabling lateral phishing.
Arctic Wolf Cybersecurity Company
Arctic Wolf is a cybersecurity company that analyzed Kali365 phishing campaigns targeting Russia's MAX messenger.