Skip to content
NewA calmer, faster ZeroHour

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The Hacker Newsby @TheHackersNews ()6 min read2
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

6 min read at thehackernews.com

The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2. 0 Device Authorization Grant to bypass Multi-Factor Authentication (MFA) and seize control of user accounts.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.