Kali365 device code phishing targets Microsoft 365 users with trusted login pages, multi-brand lures, and persistent OAuth token access.