Cybersecurity experts warn of Microsoft phishing exploits and rapid phishbot kits

Cybersecurity researchers have identified evolving phishing tactics targeting Microsoft users and the rise of accessible phishing kits.

Kaspersky reported a campaign between August 1 and September 18 involving over 31,000 fraudulent emails. Attackers exploit the Microsoft Entra admin center by registering malicious applications with custom redirect URIs. When victims click links in emails disguised as official Microsoft communications—such as requests to update credentials or sign documents—they are redirected to fraudulent sites designed to steal personal data or distribute malware.

Separately, Malwarebytes discovered ready-to-use phishbot kits that allow criminals to steal accounts in as little as 10 minutes. These kits include fake websites, command centers, and victim monitoring tools, significantly lowering the technical barrier for cybercriminals. Experts recommend that users avoid clicking links in messages and instead manually access official apps or websites to verify authenticity.