Lexfo Uncovers Sophisticated Phishing Kits Leveraging Evilginx to Bypass MFA
New phishing kits use open-source Evilginx to proxy M365 sessions, capturing cookies and OAuth tokens, bypassing MFA.
microsoft-365-security
Jalisco & OmegaLord: Deep Dive into Advanced Microsoft 365 Phishing Tactics via Device Code Flow and OAuth Abuse
Jalisco and OmegaLord phishing kits exploit Microsoft 365 device code flows and OAuth to bypass MFA, gain persistent access, and compromise accounts.
FBI Warns: Kali365 Phishing Kit Exploits M365 OAuth Tokens – Unpacking the Evolving PaaS Threat
FBI warns of Kali365 phishing kit hijacking Microsoft 365 OAuth tokens, enabling persistent access and bypassing MFA. Learn defensive strategies.
FBI Warns: Kali365 Phishing Kit Exploits Microsoft 365 OAuth for Persistent Access
FBI warns of Kali365, a fast-growing phishing kit abusing Microsoft 365 OAuth to gain persistent access, posing a severe threat.