Kali365 phishing kit defeats MFA, steals Microsoft credentials

The week of May 25 to May 31, 2026, saw several notable cybersecurity incidents and threats, including:

• Payment apps allegedly listening to conversations.
• Scammers posing as Microsoft executives for fraudulent activities.
• A significant ClickFix malware campaign that hijacked over 700 education and tech websites.
• The distribution of the Deno RAT through fake software on GitHub and SourceForge.
• LinkedIn phishing emails using Adobe for victim tracking.
• Misleading claims about phone microphones made by a company.
• The Kali365 phishing kit successfully bypassing multi-factor authentication to steal Microsoft logins.
• A malicious site masquerading as a ChatGPT download infecting Windows and Mac users with malware.
• Urgent security reminders for Windows PCs, highlighting a deadline in June 2026.
• A data breach at Carnival affecting nearly 6 million customers.
• Phishing attacks targeting Signal users to steal backup recovery keys.