Will Forg365 PhaaS lead to 1,000+ documented M365 account compromises by end of 2026?

Forg365 is a new phishing-as-a-service platform combining adversary-in-the-middle and device code attacks with AI-generated lures to steal Microsoft 365 credentials. This represents a significant escalation in AI-assisted phishing infrastructure. Source: Bleeping Computer.

Resolution Criteria

Public disclosure by Microsoft, CISA, security researchers, or law enforcement confirming 1,000+ M365 accounts compromised via Forg365 (or attributed to its operators) by end of 2026.