Inside Knight Office, a New M365 AiTM Phishing Kit

The Knight Office phishing kit enables attackers to bypass MFA and hijack Microsoft 365 accounts by stealing valid session tokens through sophisticated Adversary-in-the-Middle (AiTM) attacks, leveraging trusted redirects, compromised sites, and callback proxies to maintain persistent, stealthy access.