Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

Greatness PhaaS Bypasses Email Security and MFA to Hijack Microsoft 365 Accounts

Cybersecurity NewsAugust 5, 20264 min read

Greatness has emerged as a phishing-as-a-service platform designed to steal Microsoft 365 access at a time when many organizations assume multi-factor authentication will stop account takeovers. Rather than simply collecting a password, it can capture a valid sign-in token that lets an attacker enter cloud services as the victim. A recent campaign used spoofed RingCentral […] The post Greatness PhaaS Bypasses Email Security and MFA to Hijack Microsoft 365 Accounts appeared first on Cyber Security News.

Greatness has emerged as a phishing-as-a-service platform designed to steal Microsoft 365 access at a time when many organizations assume multi-factor authentication will stop account takeovers. Rather than simply collecting a password, it can capture a valid sign-in token that lets an attacker enter cloud services as the victim. A recent campaign used spoofed RingCentral voicemail and performance-review emails to reach inboxes. The messages failed SPF, DKIM, and DMARC checks, yet domain-based safe-sender…

Excerpt shown under the publisher's RSS terms · 73 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article