Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

Cybersecurity alert on Forg365 phishing-as-service targeting Microsoft 365.

A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation, and post-compromise mailbox operations t…