Greatness PhaaS Kit Adds Device Code Phishing to Bypass MFA
The Greatness phishing-as-a-service platform has added a device code phishing technique that bypasses multi-factor authentication and steals access tokens. This method tricks users into submitting codes on attacker-controlled devices, allowing session hijacking even with MFA enabled. Organizations should update training and monitoring to address this evolving threat.