The FBI has discovered a new threat on the Internet, identified as Kali365, which primarily targets users of the Microsoft 365 cloud office suite. It is a phishing-as-a-service platform that is spreading among cybercriminals primarily through the popular messaging app Telegram. According to the FBI, this platform significantly lowers the entry threshold for carrying out attacks. It allows less technically savvy attackers to access artificial intelligence-generated \u201cfishing\u201d baits.
The attack itself is delivered to victims via email. The user first receives an email that falsely claims to be from a trusted cloud productivity service or document sharing platform. The message includes a device-specific code and instructions to visit a legitimate Microsoft verification page and enter the code.
When the recipient actually opens the real Microsoft website and types or pastes the code into it, they unknowingly share their \u201cOAuth\u201d access code with the attacker. The attacker can then use this information on their own computer to gain direct access to the victim\u2019s Microsoft 365 account. The FBI warns that once the process is successfully completed, cybercriminals can freely access key services such as Outlook, Teams, and OneDrive without having to enter a password or take any additional steps for multi-factor authentication.
Proofpoint points out that this type of device phishing is currently experiencing an explosion in the cyberthreat world, with new tools emerging every week. This exponential growth directly coincides with the public disclosure of criminal tools and the emergence of numerous phishing-as-a-service offers. Most defenses against this type of threat are implemented at the enterprise level, where blocking device authentication or implementing conditional access policies can help prevent or limit these attacks.<\/p>\n\n\n\n
For regular users, however, it is crucial to be aware that tokens can be stolen in this way and used on an attacker's device. Therefore, it is essential to exercise common sense. This means not following links to documents you are not expecting, being wary of any email that asks for action, and always checking the validity of the message before clicking.<\/p>\n
FBI je na svetovnem spletu odkrili novo nevarnost, prepoznano pod imenom Kali365, ki cilja predvsem na uporabnike obla\u010dnega pisarni\u0161kega paketa Microsoft 365. Gre za platformo tipa “ribarjenje kot storitev” (phishing-as-a-service), ki se med kibernetskimi nepridipravi \u0161iri predvsem prek priljubljene komunikacijske aplikacije Telegram. Po navedbah preiskovalnega urada ta platforma mo\u010dno zni\u017euje vstopni prag za izvedbo napadov. […]<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[72],"tags":[142],"class_list":["post-7631","post","type-post","status-publish","format-standard","hentry","category-orodja","tag-microsoft"],"acf":{"subtitle":"Varnostni strokovnjaki pogosto poudarjajo, da je ve\u010dfaktorska avtentikacija (MFA) klju\u010dna za\u0161\u010dita pred nepoobla\u0161\u010denimi vdori, vendar najnovej\u0161e opozorilo Ameri\u0161kega zveznega preiskovalnega urada (FBI) dokazuje, da kibernetski kriminalci vedno najdejo nove na\u010dine kako prelisi\u010diti to za\u0161\u010dito. Pojavila se je namre\u010d sofisticirana tehnika, podprta z umetno inteligenco, ki izkori\u0161\u010da Microsoftovo lastno infrastrukturo za preverjanje pristnosti, s \u010dimer napadalci pridobijo dostop do ra\u010dunov, ne da bi sploh morali prestre\u010di uporabni\u0161ka gesla.","heading":"","summary":"FBI opozarja pred platformo Kali365, ki s pomo\u010djo umetne inteligence omogo\u010da krajo \u017eetonov OAuth in zaobide ve\u010dfaktorsko avtentikacijo v Microsoft 365. Napad poteka prek la\u017ene e-po\u0161te s kodami naprav, ki uporabnike zvabi na legitimno Microsoftovo stran.","thumbnail_small":"https:\/\/racunalniske-novice.com\/wp-content\/uploads\/2026\/05\/richardbarboza-fbi-2305006-560x315.png","thumbnail_large":"https:\/\/racunalniske-novice.com\/wp-content\/uploads\/2026\/05\/richardbarboza-fbi-2305006-989x1024.png","thumbnail_caption":"","gallery":"","video_gallery":[{"youtube_url":"https:\/\/www.youtube.com\/shorts\/rNUYak1UsNM"}],"author":"","links":null,"sources":[{"title":"Forbes","url":"https:\/\/www.forbes.com\/sites\/zakdoffman\/2026\/05\/25\/fbi-warns-microsoft-users-new-attack-gains-access-to-accounts\/"}],"skip_language":[]},"yoast_head":"\n