MalwareBleeping Computer
8.5 — CRITICAL
New Forg365 phishing platform uses AI to target Microsoft 365 accounts
A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining adversary-in-the-middle (AiTM) and device code methods with AI-assisted lure generation. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Forg365 is a phishing-as-a-service (PhaaS) operation that uses AI to target Microsoft 365 accounts, combining adversary-in-the-middle and device code methods with AI-assisted lure generation.
⚙️Technical Details
Affected Systems
Microsoft 365
Attack Vectors
device-code phishingadversary-in-the-Middle (AiTM) phishingAI-assisted email content generation
💥Impact Assessment
Severity: critical
Who Is at Risk
Users of Microsoft 365 accounts, particularly those with enabled device-code authentication
🛡️Recommended Actions
1Restrict or disable Microsoft device-code authentication unless required
2Monitor Microsoft Entra logs for device-code authentication events
3Investigate mailbox rules and new device sign-ins for unexpected entries
📦Affected Products
Microsoft 365
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.