26/05/2026
FBI Warns Microsoft Users of New AI-Powered Account Hijacking Attack
The FBI issued an alert on May 21 warning users about a sophisticated new cyberattack that uses artificial intelligence to compromise Microsoft 365 accounts. According to the agency, attackers can steal access tokens and evade multi-factor authentication (MFA) protections without needing to capture login passwords directly.
The phishing campaign, known as Kali365, was identified earlier this year as part of a growing phishing-as-a-service operation. In its public advisory, the FBI said the attackers exploit Microsoft’s own authentication system to trick users and gain unauthorized access to accounts.
