{"id":30027,"date":"2026-06-10T10:51:38","date_gmt":"2026-06-10T08:51:38","guid":{"rendered":"https:\/\/perseus.de\/new-phishing-scam-bypasses-mfa-why-microsoft-365-users-should-be-particularly-attentive-now\/"},"modified":"2026-08-10T10:31:38","modified_gmt":"2026-08-10T08:31:38","slug":"new-phishing-scam-bypasses-mfa-why-microsoft-365-users-should-be-particularly-attentive-now","status":"publish","type":"post","link":"https:\/\/perseus.de\/en\/new-phishing-scam-bypasses-mfa-why-microsoft-365-users-should-be-particularly-attentive-now\/","title":{"rendered":"New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"In\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
09.06.2026<\/h6>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now \n\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

<\/p>

Multi-factor authentication (MFA) has been considered one of the most effective protection measures against account takeovers for years. Many organizations rely on an additional security feature \u2014 such as an authenticator app or SMS \u2014 to prevent threat actors from accessing corporate accounts. <\/span><\/p>

But cybercriminals are constantly evolving their methods. With Kali365, security researchers and authorities are currently observing an attack method that shows that even proven protection mechanisms are not always sufficient. Companies that use Microsoft 365 in particular should follow developments closely and review their security measures. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What is Kali365?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Kali365 is a so-called phishing-as-a-service platform. Put simply, it is a ready-made toolbox that cybercriminals can use to carry out deceptively real attacks on Microsoft 365 users. <\/span><\/p>\n

While classic phishing campaigns aim to steal usernames and passwords, Kali365 takes a different approach. The attackers exploit legitimate login processes from Microsoft and try to obtain access tokens. These tokens serve as digital access authorization and enable access to various Microsoft 365 services. <\/span><\/p>\n

The key difference is that even if multi-factor authentication has been successfully performed, attackers may still be able to access the account with a captured access token.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Why is this attack method particularly dangerous? <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Many employees have learned to watch out for suspicious links or fake login pages. However, Kali365 partially uses genuine Microsoft services and legitimate login processes. This makes the attacks appear much more credible than conventional phishing attempts. <\/span><\/p>\n

In addition, such phishing-as-a-service offers significantly reduce the technical hurdle for cybercriminals. Threat actors do not have to develop the necessary tools themselves, but can fall back on platforms that have already been prepared. <\/span><\/p>\n

As a result, the number and quality of such attacks is likely to continue to increase.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

How does a typical Kali 365 attack work?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

A Kali365 attack usually begins with a phishing email, such as an alleged document release or Teams notification. The user is prompted to enter a device code or confirm a login. <\/span><\/p>

The special feature: The registration takes place via a real Microsoft website. The user logs in regularly and confirms the multi-factor authentication as usual. In the background, however, the attacker has already started a so-called device code flow. <\/span><\/p>

With the confirmation, the user unintentionally authorizes one of the attackers’ devices. Microsoft then issues valid access permissions, which are transmitted directly to the attacker. This can then access Microsoft 365 services such as Outlook, Teams, OneDrive or SharePoint \u2013 without knowing the user’s password. <\/span><\/p>

This is exactly what makes Kali365 so dangerous: The attack abuses a legitimate Microsoft login process and can thus bypass even proven protective measures such as multi-factor authentication.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Which systems are affected? <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Basically, all organizations that use Microsoft 365 are affected. The focus is particularly on: <\/span><\/p>

  • Outlook<\/span><\/li>
  • Exchange Online<\/span><\/li>
  • Teams<\/span><\/li>
  • OneDrive<\/span><\/li>
  • SharePoint<\/span><\/li><\/ul>

    <\/p>

    If an account is compromised, threat actors can access emails, files, and internal communication data. In addition, compromised accounts are often used to carry out further phishing attacks within the company or against business partners. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    How can such attacks be recognised? <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    There are a few red flags that businesses and users should be aware of. This includes unexpected requests to sign in to Microsoft 365 or requests to enter device codes or to release a sign-in that was not initiated by the user. Unusual login attempts from unknown regions or at unusual times can also indicate a potential attack. <\/span><\/p>

    In addition, suspicious activity within Outlook, OneDrive or Teams should be carefully monitored, especially if files, emails or settings are changed for no apparent reason. Since the registration procedures used often seem legitimate, the following applies as a general rule: Every unexpected registration or release request should be critically examined before reacting to it. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    What protective measures are recommended? <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    The good news is that even though Kali365 is targeting modern authentication methods, companies can significantly reduce their risk.<\/span><\/p>

    Key measures include:<\/span><\/p>

    • Regularly sensitize employees to modern phishing techniques<\/span><\/li>
    • Actively monitor sign-in events in Microsoft 365<\/span><\/li>
    • Consistently use conditional access policies<\/span><\/li>
    • Restrict authentication procedures that are not needed<\/span><\/li>
    • Check suspicious sessions and permissions regularly<\/span><\/li>
    • Use security solutions that detect unusual login and account activity (e.g., EDR & SIEM systems)<\/span><\/li><\/ul>

      <\/p>

      Above all, it is important not to consider MFA as the sole protective measure. Modern attacks show that a multi-layered approach to security is necessary. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      Kali365 highlights an important trend in cybercrime: threat actors are increasingly focused on bypassing established protections rather than attacking them outright.<\/span><\/p>\n

      For companies, this means that even supposedly well-protected Microsoft 365 environments should be regularly checked and monitored. The combination of technical protective measures, active monitoring and sensitized employees remains the most effective protection against modern phishing attacks. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      Do you want to stay informed about current threats and security vulnerabilities?<\/i><\/p>

      Subscribe to our newsletter and receive important warnings, recommendations for action and assessments of current cyber risks directly in your inbox.<\/i><\/p>

      <\/p>

      Sources & Further Information<\/b><\/p>

      • FBI Internet Crime Complaint Center (IC3): Kali365 Phishing Campaign Targeting Microsoft 365 Users<\/span><\/i><\/li><\/ul>
        • Microsoft Learn: OAuth 2.0 Device Authorization Grant Flow<\/span><\/i><\/li><\/ul>
          • Help Net Security: FBI warns about Kali365 phishing attacks<\/span><\/i><\/li><\/ul>
            • Redmond Magazine: FBI urges Microsoft 365 defenders to watch for Kali365 phishing attacks<\/span><\/i><\/li><\/ul>
              • Malwarebytes: Kali365 phishing kit bypasses MFA and targets Microsoft logins<\/span><\/i><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
                \n\t\t\t\t\t
                \n\t\t\t\t
                \n\t\t\t\t
                \n\t\t\t\t\t\t\t
                \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

                Multi-factor authentication (MFA) has been considered one of the most effective protection measures against account takeovers for years. Many organizations rely on an additional security feature \u2014 such as an authenticator app or SMS \u2014 to prevent threat actors from accessing corporate accounts.
                \nBut cybercriminals are constantly evolving their methods. With Kali365, security researchers and authorities are currently observing an attack method that shows that even proven protection mechanisms are not always sufficient. Companies that use Microsoft 365 in particular should follow developments closely and review their security measures. <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[22],"tags":[],"class_list":["post-30027","post","type-post","status-publish","format-standard","hentry","category-gefahrenwarnung"],"acf":[],"yoast_head":"\nNew phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now - Perseus Technologies<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now - Perseus Technologies\" \/>\n<meta property=\"og:description\" content=\"Multi-factor authentication (MFA) has been considered one of the most effective protection measures against account takeovers for years. Many organizations rely on an additional security feature \u2014 such as an authenticator app or SMS \u2014 to prevent threat actors from accessing corporate accounts. But cybercriminals are constantly evolving their methods. With Kali365, security researchers and authorities are currently observing an attack method that shows that even proven protection mechanisms are not always sufficient. Companies that use Microsoft 365 in particular should follow developments closely and review their security measures.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/\" \/>\n<meta property=\"og:site_name\" content=\"Perseus Technologies\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-10T08:51:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-10T08:31:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Anastasia Pamoukis\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anastasia Pamoukis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/\"},\"author\":{\"name\":\"Anastasia Pamoukis\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/person\\\/6c87a2feea6439d0ead16c8f0f07e40b\"},\"headline\":\"New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now\",\"datePublished\":\"2026-06-10T08:51:38+00:00\",\"dateModified\":\"2026-08-10T08:31:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/\"},\"wordCount\":871,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_EN-1024x256.png\",\"articleSection\":[\"Gefahrenwarnung\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/\",\"url\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/\",\"name\":\"New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now - Perseus Technologies\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_EN-1024x256.png\",\"datePublished\":\"2026-06-10T08:51:38+00:00\",\"dateModified\":\"2026-08-10T08:31:38+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/#primaryimage\",\"url\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_EN-1024x256.png\",\"contentUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_EN-1024x256.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/perseus.de\\\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/perseus.de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#website\",\"url\":\"https:\\\/\\\/perseus.de\\\/\",\"name\":\"perseus-web.de\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/perseus.de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#organization\",\"name\":\"perseus-web.de\",\"url\":\"https:\\\/\\\/perseus.de\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/PerseusTechnologie_Color-2.png\",\"contentUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/PerseusTechnologie_Color-2.png\",\"width\":536,\"height\":172,\"caption\":\"perseus-web.de\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/person\\\/6c87a2feea6439d0ead16c8f0f07e40b\",\"name\":\"Anastasia Pamoukis\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"caption\":\"Anastasia Pamoukis\"},\"sameAs\":[\"https:\\\/\\\/perseus.de\"],\"url\":\"https:\\\/\\\/perseus.de\\\/en\\\/author\\\/anastasia-pamoukis\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now - Perseus Technologies","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/","og_locale":"en_US","og_type":"article","og_title":"New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now - Perseus Technologies","og_description":"Multi-factor authentication (MFA) has been considered one of the most effective protection measures against account takeovers for years. Many organizations rely on an additional security feature \u2014 such as an authenticator app or SMS \u2014 to prevent threat actors from accessing corporate accounts. But cybercriminals are constantly evolving their methods. With Kali365, security researchers and authorities are currently observing an attack method that shows that even proven protection mechanisms are not always sufficient. Companies that use Microsoft 365 in particular should follow developments closely and review their security measures.","og_url":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/","og_site_name":"Perseus Technologies","article_published_time":"2026-06-10T08:51:38+00:00","article_modified_time":"2026-08-10T08:31:38+00:00","og_image":[{"width":1200,"height":300,"url":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN.png","type":"image\/png"}],"author":"Anastasia Pamoukis","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Anastasia Pamoukis","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/#article","isPartOf":{"@id":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/"},"author":{"name":"Anastasia Pamoukis","@id":"https:\/\/perseus.de\/#\/schema\/person\/6c87a2feea6439d0ead16c8f0f07e40b"},"headline":"New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now","datePublished":"2026-06-10T08:51:38+00:00","dateModified":"2026-08-10T08:31:38+00:00","mainEntityOfPage":{"@id":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/"},"wordCount":871,"commentCount":0,"publisher":{"@id":"https:\/\/perseus.de\/#organization"},"image":{"@id":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/#primaryimage"},"thumbnailUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN-1024x256.png","articleSection":["Gefahrenwarnung"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/","url":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/","name":"New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now - Perseus Technologies","isPartOf":{"@id":"https:\/\/perseus.de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/#primaryimage"},"image":{"@id":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/#primaryimage"},"thumbnailUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN-1024x256.png","datePublished":"2026-06-10T08:51:38+00:00","dateModified":"2026-08-10T08:31:38+00:00","breadcrumb":{"@id":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/#primaryimage","url":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN-1024x256.png","contentUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN-1024x256.png"},{"@type":"BreadcrumbList","@id":"https:\/\/perseus.de\/neue-phishing-masche-umgeht-mfa-warum-microsoft-365-nutzende-jetzt-besonders-aufmerksam-sein-sollten\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/perseus.de\/"},{"@type":"ListItem","position":2,"name":"New phishing scam bypasses MFA: Why Microsoft 365 users should be particularly attentive now"}]},{"@type":"WebSite","@id":"https:\/\/perseus.de\/#website","url":"https:\/\/perseus.de\/","name":"perseus-web.de","description":"","publisher":{"@id":"https:\/\/perseus.de\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/perseus.de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/perseus.de\/#organization","name":"perseus-web.de","url":"https:\/\/perseus.de\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/perseus.de\/#\/schema\/logo\/image\/","url":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/03\/PerseusTechnologie_Color-2.png","contentUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/03\/PerseusTechnologie_Color-2.png","width":536,"height":172,"caption":"perseus-web.de"},"image":{"@id":"https:\/\/perseus.de\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/perseus.de\/#\/schema\/person\/6c87a2feea6439d0ead16c8f0f07e40b","name":"Anastasia Pamoukis","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","caption":"Anastasia Pamoukis"},"sameAs":["https:\/\/perseus.de"],"url":"https:\/\/perseus.de\/en\/author\/anastasia-pamoukis\/"}]}},"_links":{"self":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts\/30027","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/comments?post=30027"}],"version-history":[{"count":4,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts\/30027\/revisions"}],"predecessor-version":[{"id":30081,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts\/30027\/revisions\/30081"}],"wp:attachment":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/media?parent=30027"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/categories?post=30027"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/tags?post=30027"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}