Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

A new phishing-as-a-service operation named Forg365 is targeting Microsoft 365 accounts using sophisticated tactics like device code phishing and adversary-in-the-middle schemes. This operation, available on Telegram for $400 a month, employs AI to craft more convincing lures and includes post-compromise mailbox operations. Such advanced phishing techniques highlight the escalating threat landscape for enterprise cybersecurity, making it crucial for organizations to bolster their defenses against these increasingly sophisticated attacks.