Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation, and post-compromise mailbox operations targeting Microsoft 365 accounts.

Distributed via Telegram and costing $400 a month (or $3,800 per year), attack chains leverage phishing

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Attack Update: Top 5 Attack-IPs auf doode.info – 06.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 β€” 265 requests (recent log) 213.209.159.175 β€” 263 requests (recent log) 216.244.66.232 β€” 55 requests (recent

Attack Update: Top 5 Attack-IPs auf doode.info – 15.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 β€” 542 requests (recent log) 102.220.160.79 β€” 542 requests (recent log) 93.152.221.118 β€” 284 requests (recent

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The