02/06/2026
CYBER SECURITY ALERT - KALI365 PHISHING ATTACK
If your business uses Microsoft 365, please read this.
There is a phishing attack doing the rounds that is particularly convincing - it directs people to a genuine-looking Microsoft sign-in page and asks them to enter a verification code. The problem? That code hands full control of your Microsoft 365 account - including Outlook, Teams and OneDrive - to an attacker. No password needed. MFA bypassed.
Our team has already intercepted attempts of this type, and we are expecting more.
The golden rule: if you didn't start the login process yourself, don't enter the code.
Read our full guide to find out what to look out for and what to do if you think you've been targeted - https://bit.ly/3RFZue9