Greatness

Greatness PhaaS Uses Device‑Code Phishing and AiTM Proxies to Steal Microsoft 365 Tokens

Researchers warn the platform’s new OAuth flows let attackers bypass multi‑factor authentication to gain long‑lived access to corporate Microsoft 365 accounts.