Kali365: Anatomy of a Microsoft 365 Phishing-as-a-Service Kit – From Telegram Hype to FBI Takedown Theater

Kali365 is a highly sophisticated Phishing-as-a-Service platform that bypasses MFA to steal Microsoft 365 session tokens at scale, enabling persistent business email compromise across thousands of small and mid-sized organizations worldwide, with its operators evading law enforcement through rapid rebranding and infrastructure churn rather than true shutdown.