Greatness PhaaS Bypasses Email Security and MFA to Hijack Microsoft 365 Accounts

Greatness has emerged as a phishing-as-a-service platform designed to steal Microsoft 365 access at a time when many organizations assume multi-factor authentication will stop account takeovers. Rather than simply collecting a password, it can capture a valid sign-in token that lets an attacker enter cloud services as the victim. A recent campaign used spoofed RingCentral voicemail and performance-review emails to reach inboxes. The messages failed SPF, DKIM, and DMARC checks, yet domain-based safe-sender exclusions overrode those failures. This turns a convenience setting into an opening for attackers. Analysts at ZeroBEC identified the activity while investigating four emails sent to a protected organization. ZeroBEC...

Read the full article at the source.