FBI warned Microsoft 365 users about Kali365, a phishing platform. Kali365, spread via Telegram, enables hackers to steal Microsoft 365 access tokens and bypass multi-factor authentication without intercepting user credentials. It lowers barrier of entry, providing less-technical attackers access to AI phishing lures, automated campaign templates and real-time targeted entity tracking dashboards.