FBI warns Microsoft 365 users of dangerous Kali365 phishing scam: How it works and how to stay safe

If you use Microsoft 365 for work including apps like Outlook, Teams or OneDrive, the FBI wants you to be aware of a new and fast moving phishing scam. On May 21, the agency issued a Public Service Announcement warning the public about an emerging threat called the “Kali365 Phishing Kit,” which it first detected in April 2026, according to the FBI’s Internet Crime Complaint Center.

And what makes this scam particularly dangerous is that hackers do not need your password to break in.