AI-Powered Forg365 Phishing Platform Targets Microsoft 365 Accounts

As generative AI becomes more widespread, a new phishing-as-a-service platform called Forg365 is targeting Microsoft 365 accounts. Its built-in AI tools automatically generate convincing emails, while adversary-in-the-middle attacks allow users to bypass multifactor authentication, lowering the technical barrier to cybercrime. The platform poses a major threat to businesses worldwide that rely on cloud-based productivity tools, potentially exposing large volumes of credentials and sensitive corporate data.

SentinelLabs and ZeroBEC disclosed in July 2026 that the platform was being sold on Telegram for $400 a month or $3,800 a year. It offers a full suite of tools, including the ForgCookie extension, to maintain long-term access. On July 14, reports also emerged that the Helix ransomware group had used credentials of this kind to breach Microsoft SharePoint and steal data.