negativeSYS.SOURCE: The Hacker News• 2026-07-13T18:33:33+05:30

Forg365 PhaaS Exploits Device Code and AitM Tactics to Compromise Microsoft 365 Accounts

#phishing #ai #microsoft-365 #session-theft #phaas

A new PhaaS operation called Forg365 targets Microsoft 365 accounts using device code phishing and adversary-in-the-middle (AitM) tactics, combined with AI-assisted lure creation and session theft capabilities. The platform offers a subscription-based model with automated tools for phishing campaigns, session management, and post-compromise activities like keyword monitoring and AI-generated responses.

A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation, and post-compromise mailbox operations targeting Microsoft 365 accounts.

Distributed via Telegram and costing $400 a month (or $3,800 per year), attack chains leverage phishing

Read original article

*** END OF TRANSMISSION ***

> FORG365 PHAAS EXPLOITS DEVICE CODE AND AITM TACTICS TO COMPROMISE MICROSOFT 365 ACCOUNTS > UBER'S ROBOTAXI LOBBYING STRATEGY CONTRASTS WITH WAYMO'S APPROACH IN D.C. REGULATORY BATTLE > SAN FRANCISCO POLICE DRONE SURVEILLANCE LEAK REVEALS UNINTENDED PUBLIC EXPOSURE OF AERIAL SURVEILLANCE DATA > META'S PATENT FOR CONTINUOUS AI EMOTIONAL MONITORING VIA VOICE AND BIOMETRICS > DOM-DOCX: MIT-LICENSED HTML TO NATIVE WORD DOCUMENT CONVERTER > USER'S FRUSTRATING DEPARTURE FROM ADOBE PHOTOSHOP AND CREATIVE CLOUD > SHIFTING FOCUS FROM CODE TO DESIGN IN AI-DRIVEN SOFTWARE DEVELOPMENT > INTEGRATING AUTONOMOUS AI AND ANALYST COPILOTS IN SECURITY OPERATIONS CENTERS > VOXEL TOKYO: REAL-TIME CULTURAL IMMERSION THROUGH URBAN SIMULATION AND LANGUAGE STUDY > AI-GENERATED POWERSHELL SCRIPT USED IN ACTIVE DIRECTORY ENUMERATION ATTACK> FORG365 PHAAS EXPLOITS DEVICE CODE AND AITM TACTICS TO COMPROMISE MICROSOFT 365 ACCOUNTS > UBER'S ROBOTAXI LOBBYING STRATEGY CONTRASTS WITH WAYMO'S APPROACH IN D.C. REGULATORY BATTLE > SAN FRANCISCO POLICE DRONE SURVEILLANCE LEAK REVEALS UNINTENDED PUBLIC EXPOSURE OF AERIAL SURVEILLANCE DATA > META'S PATENT FOR CONTINUOUS AI EMOTIONAL MONITORING VIA VOICE AND BIOMETRICS > DOM-DOCX: MIT-LICENSED HTML TO NATIVE WORD DOCUMENT CONVERTER > USER'S FRUSTRATING DEPARTURE FROM ADOBE PHOTOSHOP AND CREATIVE CLOUD > SHIFTING FOCUS FROM CODE TO DESIGN IN AI-DRIVEN SOFTWARE DEVELOPMENT > INTEGRATING AUTONOMOUS AI AND ANALYST COPILOTS IN SECURITY OPERATIONS CENTERS > VOXEL TOKYO: REAL-TIME CULTURAL IMMERSION THROUGH URBAN SIMULATION AND LANGUAGE STUDY > AI-GENERATED POWERSHELL SCRIPT USED IN ACTIVE DIRECTORY ENUMERATION ATTACK