Inside Knight Office, a New M365 AiTM Phishing Kit

Reported 02 Sep 2026 by otx · Severity: medium

Huntress researchers discovered Knight Office, a phishing kit utilizing Adversary-in-the-Middle techniques to steal Microsoft 365 session tokens. The attack chain begins with DocuSign-themed phishing emails containing redirects through Monday.com and compromised Joomla websites.