# Greatness PhaaS Kit Adds Device Code Phishing to Bypass MFA

The Greatness phishing-as-a-service platform has added a device code phishing technique that bypasses multi-factor authentication and steals access tokens. This method tricks users into submitting codes on attacker-controlled devices, allowing session hijacking even with MFA enabled. Organizations should update training and monitoring to address this evolving threat.

**Importance:** 3/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/08/greatness-phaas-adds-device-code.html) — Tue, 04 Aug 2026 22:57:39 +0530