Microsoft Scam Threat

[Terrel L. Shields]

The FBI released an urgent security warning to the public about a fast-acting scam targeting Microsoft 365 users on Teams, Outlook and OneDrive.

The agency warned that the hacking platform Kali365 seeks out OAuth device codes, allowing scammers to sneak past multifactor authentication codes, and without the need for a password, to access Microsoft accounts.

Scammers will send a phishing email impersonating a trusted document-sharing service with a device code and instructions on how to verify, according to the FBI.

“Kali365 lowers the barrier of entry, providing less-technical attackers access to AI-generated phishing lures, automated campaign templates, real-time targeted individual/entity tracking dashboards, and OAuth token capture capabilities,” the FBI stated.

Expand article logo Continue reading

The platform is sold to scammers with a $250 per month subscription.

 

[Tom D]

Never click a go to line in any email that asks you to go somewhere. Most scammers have a weird email address which also gives it away. However, i have read that with AI scamming, it does look like the real thing. But, you still have to do something on that email to trigger it's entry into your system.