New Forg365 phishing platform uses AI to target Microsoft 365 accounts
ID: 69a07eea-0e79-53e9-9a26-5d5ea32a2b7b
STIX ID: report--69a07eea-0e79-53e9-9a26-5d5ea32a2b7b
Feed Name: Bleeping Computer
Threat Score
ZeroBEC researchers report on Forg365, a mature phishing-as-a-service platform that targets Microsoft 365 accounts using AI-generated lures, device-code and AiTM phishing, token/cookie harvesting, and a browser extension (ForgCookie) that refreshes SSO cookies to maintain persistent access; the platform includes campaign management, account monitoring, anti-bot protections, and leverages legitimate services (Amazon SES, Cloudflare Pages) to blend into normal traffic.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.