Kali365 phishing kit bypasses MFA and steals Microsoft logins

The FBI warns of a new phishing kit called “Kali365” that phishers are using to bypass MFA and steal Microsoft credentials, enabling long-term access to Outlook, Teams, OneDrive and other Microsoft 365 resources. The same Malwarebytes feed highlights related threats: Adobe Target abuse in LinkedIn-themed phishing, fake installers on GitHub/SourceForge distributing a Deno RAT, a large ClickFix campaign exploiting Ghost CMS to push malware via fake Cloudflare verification pages, and a fraudulent malware-signing service (Fox Tempest) used to bypass security checks. Overall this set of reports rat