Kali365 Phishing Kit Exploits Microsoft Device Code Flow to Target US Enterprises
Kali365, a device code phishing kit, is actively targeting US organizations by abusing Microsoft's legitimate authentication flow. According to ANY.RUN telemetry, the…
Tag: OAuth token abuse
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce disabled the Klue Battlecards app integration after detecting unusual activity that led to unauthorized access to customer data via OAuth token…
Icarus: Extortion Group Behind Klue OAuth Token Abuse
Icarus is an extortion group active since April 28, 2026, responsible for compromising Klue's integration infrastructure and exfiltrating customer data via OAuth…