What is Kali365? FBI warns Telegram-based phishing service targeting Microsoft 365 users

Short summary

The FBI has warned about Kali365, a Telegram-distributed phishing service enabling low-skilled attackers to conduct sophisticated campaigns targeting Microsoft 365 users. Detected in April 2026, the platform significantly lowers the barrier to credential theft at scale. Organizations should alert employees, implement security training, and enforce multi-factor authentication to mitigate this emerging threat.

• •Kali365 is a phishing-as-a-service platform distributed via Telegram targeting Microsoft 365 users
• •Enables even low-skilled attackers to conduct large-scale, sophisticated phishing campaigns
• •Organizations should educate staff and strengthen authentication controls immediately

Generated with AI, which can make mistakes.