MalwareApr 24, 2026
V2 of the #Kali365 PhaaS toolkit has emerged with dedicated OAuth and AI-based lure generation, s...
Kali365 PhaaS toolkit V2 emerges with OAuth and AI-based phishing lure generation.
Summary
The second version of Kali365, a phishing-as-a-service toolkit, has been discovered in active distribution via Telegram with enhanced capabilities including OAuth integration and AI-powered lure generation. The toolkit features a domain marketplace, Cloudflare worker hosting integration, and keyword search functionality, enabling widespread phishing campaign abuse.
Indicators of Compromise
- malware — Kali365
Entities
OAuth (technology)Cloudflare Workers (technology)Telegram (technology)