Skip to content
The Nexus
DossierENTITY

phishing-as-a-service (PhaaS)

Coverage of phishing-as-a-service (PhaaS) in the Nexus archive.

Earliest in view: May 25 · 12:45 UTCMost recent: Aug 26 · 05:47 UTC
Co-mentioned in this coverage
Appleorganization1AI voice agentstopic1Apple Supportorganization1SOCRadar Threat Research Unit (STRU)organization1AnonyMousKITtopic1Passcodestopic1Greatness PhaaSorganization1device code phishingtopic1OAuth 2.0 device authorization granttopic1Multi-Factor Authentication (MFA)topic1FBIorganization1Kali365organization1Microsoft 365product1OAuth device code authenticationtopic1multi-factor authentication (MFA)topic1session tokenstopic1
Recent coverage
  • SECURITYAug 26 · 05:47 UTCTHE HACKER NEWS
    Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

    Cybersecurity researchers disclosed a phishing-as-a-service (PhaaS) platform designed to strip Apple's Activation Lock from stolen devices. This system utilizes AI voice agents that call theft victims while impersonating Apple Support to obtain the device passcode. SOCRadar Threat Research Unit tracks this malicious platform, identifying it as AnonyMousKIT.

  • SECURITYAug 4 · 17:27 UTCTHE HACKER NEWS
    Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

    The Greatness phishing-as-a-service (PhaaS) toolkit now supports device code phishing, which exploits the OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication (MFA) and steal user tokens. This method allows attackers to seize control of accounts by leveraging a legitimate authentication protocol.

  • SECURITYMay 25 · 12:45 UTCBLEEPING COMPUTER
    FBI warns of Kali365 phishing service targeting Microsoft 365 accounts

    The FBI has issued a warning about the Kali365 phishing-as-a-service platform, which exploits OAuth device code authentication to hijack Microsoft 365 accounts. The service steals session tokens and bypasses multi-factor authentication (MFA), posing a significant cybersecurity threat.