Tag: phishing-as-a-service-plattform

A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining adversary-in-the-middle (AiTM) and device code methods with AI-assisted lure generation. […]

A new phishing-as-a-service (PhaaS) platform dubbed „ARToken“ appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. […]

The Bluekit phishing-as-a-service platform continues to evolve with nearly 70 new hostnames identified over the past week and by adding browser-in-the-middle capabilities for improved data theft. […]

FBI nimmt Phishing-as-a-Service-Plattform „Outsider“ hopsheise Security Quelle: Heise Security Ticker

Das FBI warnt vor Kali365, einer Phishing-as-a-Service-Plattform die seit April 2026 gezielt Microsoft-365-Umgebungen angreift. Die Plattform missbraucht den legitimen OAuth Device Code Flow und umgeht MFA, ohne eine einzige Sicherheitslücke auszunutzen. Ab 250 Dollar monatlich sind keine technischen Kenntnisse erforderlich.