Published Aug 4, 2026, 1:27 PM ET · Updated 3 months ago · 1 source
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The Hacker News
·
Original Report
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication (MFA) and seize control of user accounts. "Greatness supports AiTM [adversary-in-the-middle] credential and