Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

Let op: Dit artikel is automatisch opgehaald uit een externe bron en nog niet vertaald of bewerkt. Publicatie vereist handmatige review.

Originele bron: The Hacker News

---

The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication (MFA) and seize control of user accounts. “Greatness supports AiTM [adversary-in-the-middle] credential and

Bron: The Hacker News — Lees het volledige artikel

Gerelateerde artikelen

PhishingFake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote AccessCybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom software updates, business doc...4 aug 2026PhishingDevice Code Phishing Up 1,500% in 2026; Vishing DoublesNewer social engineering techniques help attackers ignore entrenched security controls and limit the evidence they leave behind.4 aug 2026PhishingSmoke#Screen RMM Takeover Gambit Exposes Threat Actor PlaybookThe attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to compromised networks.4 aug 2026PhishingPhishingplatform Kratos opgerold: 1.800 klanten, 15.000 campagnes per maandDuitse en Amerikaanse opsporingsdiensten hebben het phishing-as-a-service-platform Kratos ontmanteld en de ontwikkelaar in Indonesië laten arresteren. Meer dan 200 servers gingen offline.21 jul 2026