Cali 365 Phishing Kit Captures Microsoft 365 Tokens to Bypass MFA
John Hammond examines Cali 365 and related Octo Pi 365 phishing kits, which use device-code phishing to capture Microsoft 365 OAuth tokens, bypass MFA and enable mailbox access, business email compromise and wire-fraud scams. Research indicates activity continues.
