Tag

#Phishing-as-a-Service

2 articles covering Phishing-as-a-Service across campaign analysis, detection engineering, and defender tradecraft.

Coverage

2 entries

Field Analysis

Dual UseInfrastructure IntelligenceJun 7, 20269 min read

Kali365 Outgrows Microsoft 365: Operator Pivots to Okta, AWS, and a Russian-Language Cluster

Arctic Wolf's June 2 follow-up describes the Kali365 operator expanding well beyond Microsoft 365: Okta SSO, Xerox DocuShare, AWS-style endpoints, and a Russian-language cluster including MAX Messenger account takeover via real SMS OTPs. Proofpoint's research places the kit inside a broader cluster of AI-generated device-code lookalikes.

Kali365 and the Productization of Token Theft

An FBI-flagged phishing-as-a-service kit rents Microsoft 365 token theft for $250 a month, packaging device-code and OAuth abuse into a point-and-click dashboard that defeats MFA without a fake login page.

#Phishing-as-a-Service

Coverage

Browse Other Tags