🕵️ Kali365

The items that name it 6

• Unboxing Phishing Kits: Huntress Examines 3 Real Kits
  articleas classification.key entities2026-10-22
• Inside Knight Office, a New M365 AiTM Phishing Kit
  writeupas threat actors2026-09-02

  Another AiTM phishing kit referenced by Huntress as similar to Knight Office, targeting valid session tokens to bypass MFA

• Device Code Phishing Keeps Evolving. Here’s What to Watch For
  writeupas threat actors2026-07-31

  Mentioned as a possibly-aligned campaign/brand name in the broader device code phishing attack pattern, alongside Railway and EvilTokens.

• We Need to Talk About Device Code Phishing
  articleas threat actors2026-06-22

  PhaaS platform that has built device code phishing into its cybercrime product offerings; the FBI recently warned about this platform.

• Inside Kali365, a Device Code Phishing Ecosystem | Huntress
  writeupas threat actors2026-06-11

  AI-enabled Phishing-as-a-Service (PhaaS) kit/ecosystem first observed in April 2026 per the FBI; uses device code authentication flow to capture Microsoft 365 tokens/sessions, maintain persistence, and support follow-on BEC and fraud. Has at least three panel variants (E1, E2, E3), 33 built-in lure

• How EvilTokens Turbocharges Old School Phishing with AI
  articleas threat actors2026-05-11

  Cited alongside EvilTokens as part of the broader thriving phishing-as-a-service ecosystem operating with similar levels of infrastructure and sophistication.