I Found an MFA-Bypassing Phishing Kit on the Dark Web

Name: I Found an MFA-Bypassing Phishing Kit on the Dark Web
Uploaded: 2026-08-12
Duration: 18 min 1 s
Channel: John Hammond
Description: The video explains how the Kali365 phishing-as-a-service kit works, including how device code phishing lets attackers steal Microsoft 365 OAuth tokens and bypass MFA. It then walks through unpacking the kit's Electron desktop applications to inspect their code, endpoints and features. The viewer also gets detection and defensive points such as session revocation and device-code controls.

John Hammond · 18 min

The video explains how the Kali365 phishing-as-a-service kit works, including how device code phishing lets attackers steal Microsoft 365 OAuth tokens and bypass MFA. It then walks through unpacking the kit's Electron desktop applications to inspect their code, endpoints and features. The viewer also gets detection and defensive points such as session revocation and device-code controls.