Greatness PhaaS adds device code phishing, spoofs RingCentral to steal Microsoft 365 accounts

The Greatness PhaaS scam is targeting Microsoft 365 accounts by spoofing RingCentral emails. The campaign uses device code phishing to steal credentials across 120 organizations.

• Microsoft 365 users hit by phishing scheme posing as RingCentral emails
• Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk
• Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
• Phishing service spoofs RingCentral to steal Microsoft 365 accounts