Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The Greatness phishing-as-a-service toolkit has added device code phishing capabilities, allowing it to bypass Multi-Factor Authentication and steal user tokens. This is done by exploiting the OAuth 2.0 Device Authorization Grant, a legitimate protocol. The addition of device code phishing to Greatness makes it a more formidable crimeware solution. Greatness also supports adversary-in-the-middle credential phishing, further enhancing its capabilities. The toolkit's evolution highlights the growing threat of device code phishing attacks. Greatness is now more effective at seizing control of user accounts.