All Huntress Blog Posts

All Huntress Blog Posts

All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.

Author: Tanner Filip
Threat Research
Hook, Line, and Token: Anatomy of the Kali365 / Octopi365 Phishing-as-a-Service Kit
Hook, Line, and Token: Anatomy of the Kali365 / Octopi365 Phishing-as-a-Service Kit

Huntress traced device code phishing from Tencent Cloud to Kali365, a Microsoft 365 kit that steals tokens and keeps access even after MFA or password resets.

June 11, 2026
Dissecting CrashFix: KongTuke's New Toy
Dissecting CrashFix: KongTuke's New Toy

KongTuke built a fake browser extension that tells users their browser crashed and needs a scan. It doesn't. Huntress tracked this campaign back to a threat actor we've been following since 2025.