|
Kali365 Phishing Program Popular On Dark Web
There's a new service on the dark web picking up steam and it's the Kali 365 phishing program. The FBI is warning that for just $250/month, even low-skill bad actors can purchase this program and begin looking to compromise user accounts.
It's a rising method of attack in Q2 with expected continued growth in Q3 2026, so it's important to be aware of the attack so you can watch for it and avoid it. As with many phishing attacks, this one will begin with an email meant to appear to be coming from a trusted website (something along the lines of SharePoint, DropBox, or another legitimate site). This asks for a code to be entered into Microsoft.
This is where this type of attack is different that it has been able to trick more people: the link it sends you to from the email is a legitimate Microsoft link. The page and the link itself will look exactly correct - because they are. The trick is that the code the email is having you enter into a legitimate Microsoft device is actually granting them a token to be authorized on your account, meaning that entering said code means the user has granted access to the bad actor without them even knowing the account password or MFA.
Again, as with many phishing-centric attacks, the biggest defense against these attacks is education, so feel free to forward this on to others as you see fit. It is only becoming more important to not interact with or click on emails with links or requesting users to do something that could compromise an account or lead to a financial change unless the email was previously expected, has been separately verified after being received, and/or all other protocols have been followed (such as calling to verify a bank account change before doing so).
If you have any questions, please feel free to reach out to our office and we'll do our best to assist you.
| 
