Back to Feed
MalwareApr 24, 2026

V2 of the #Kali365 PhaaS toolkit has emerged with dedicated OAuth and AI-based lure generation, s...

Kali365 PhaaS toolkit V2 emerges with OAuth and AI-based phishing lure generation.

Summary

The second version of Kali365, a phishing-as-a-service toolkit, has been discovered in active distribution via Telegram with enhanced capabilities including OAuth integration and AI-powered lure generation. The toolkit features a domain marketplace, Cloudflare worker hosting integration, and keyword search functionality, enabling widespread phishing campaign abuse.

Indicators of Compromise

  • malware — Kali365

Entities

OAuth (technology)Cloudflare Workers (technology)Telegram (technology)