THREATOPS

THREAT OPS › Threat News › Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

lowthehackernewsPublished 2026-08-04

The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication (MFA) and seize control of user accounts.

"Greatness supports AiTM [adversary-in-the-middle] credential and

MITRE ATT&CK techniques

Adversary-in-the-MiddleT1557
Multi-Factor AuthenticationT1556.006

Original source: https://thehackernews.com/2026/08/greatness-phaas-adds-device-code.html