Greatness PhaaS Bypasses Email Security and MFA to Hijack Microsoft 365 Accounts

Greatness has emerged as a phishing-as-a-service platform designed to steal Microsoft 365 access at a time when many organizations assume multi-factor authentication will stop account takeovers. Rather than simply collecting a password, it can capture a valid sign-in token that lets an attacker enter cloud services as the victim. A recent campaign used spoofed RingCentral […]

Read the original article: