Inside Kali365, a Device Code Phishing Ecosystem | Huntress

T1Covered by 1 source · first reported by Huntress at 11 Jun, 18:00 UTC

Huntress traced device code phishing from Tencent Cloud to Kali365, a Microsoft 365 kit that steals tokens and keeps access even after MFA or password resets.

security

Sources

• T1Inside Kali365, a Device Code Phishing Ecosystem | HuntressHuntress11 Jun, 18:00