Lexfo Uncovers Sophisticated Phishing Kits Leveraging Evilginx to Bypass MFA
New phishing kits use open-source Evilginx to proxy M365 sessions, capturing cookies and OAuth tokens, bypassing MFA.
phishing-kit
FBI Warns: Kali365 Phishing Kit Exploits Microsoft 365 OAuth for Persistent Access
FBI warns of Kali365, a fast-growing phishing kit abusing Microsoft 365 OAuth to gain persistent access, posing a severe threat.