Hook, Line, and Token: Anatomy of the Kali365 / Octopi365 Phishing-as-a-Service Kit

The Kali365/Octopi365 Phishing-as-a-Service ecosystem enables attackers to rapidly compromise Microsoft 365 accounts, maintain persistent access—even bypassing MFA—and weaponize stolen sessions for business email compromise and fraud, all through a mature, feature-rich platform that blends seamlessly into normal user activity and is difficult for defenders to detect.