Forg365 phishing-as-a-service platform targets Microsoft 365

ZeroBEC disclosed Forg365, a phishing-as-a-service platform targeting Microsoft 365.

The platform integrates adversary-in-the-middle, device code phishing and AI-assisted lure generation in a single operator panel.

It uses Amazon SES for email delivery and Cloudflare Pages for landing pages.

A companion browser extension called ForgCookie silently refreshes stolen Microsoft SSO cookies for persistent access.