The FBI is warning the public about a new hacker scam that looks to break into your Microsoft 365 account. It's been nearly 4 months since Nancy Guthrie disappeared. An ex-FBI special agent believes the names of possible suspects are in the thousands of tips investigators are scouring.

Scammers are impersonating Microsoft with urgent deadline threats and fake legal language to rush victims into clicking dangerous links.

The FBI warns of Kali365, a phishing scam exploiting Microsoft 365 verification tools to bypass security, granting hackers ongoing access to accounts. Users are urged to review authentication practices.

The FBI warned on May 21 that cybercriminals are increasingly targeting Microsoft 365 users with sophisticated phishing scams. The scam uses a tool called “Kali365” to steal account access tokens and bypass multi-factor authentication protections.

A new phishing kit is being offered on Telegram allowing even newbie hackers an easy way to grab OAuth tokens.