FBI Issues Urgent Security Warning for Microsoft 365 Users
The Federal Bureau of Investigation (FBI) has released an urgent security warning concerning a rapid-acting scam targeting Microsoft 365 users across Teams, Outlook, and OneDrive. The agency identified a hacking platform, Kali365, which seeks out OAuth device codes. This allows scammers to bypass multi-factor authentication, enabling access to Microsoft accounts without requiring a password.
The Federal Bureau of Investigation (FBI) has issued an urgent security warning regarding a new and fast-acting scam. The alert specifically targets users of Microsoft 365 services, including Teams, Outlook, and OneDrive.
According to the FBI, the hacking platform known as Kali365 is central to this scam. This platform is designed to identify and exploit OAuth device codes.
By leveraging these OAuth device codes, scammers are able to circumvent multi-factor authentication protocols. This critical vulnerability allows unauthorized access to Microsoft accounts without the need for the user's password.
(Source: The Hill)
