New phishing-as-a-service tool “Greatness” already seen in the wild

• A previously unreported phishing-as-a-service (PaaS) offering named “Greatness” has been used in several phishing campaigns since at least mid-2022. Greatness incorporates features seen in some of the most advanced PaaS offerings, such as multi-factor authentication (MFA) bypass, IP filtering and integration with Telegram bots.


• Greatness, for now, is only focused on Microsoft 365 phishing pages, providing its affiliates with an attachment and link builder that creates highly convincing decoy and login pages. It contains features such as having the victim’s …

advanced as-a-service authentication bots bypass campaigns factor features integration mfa multi-factor multi-factor authentication paas phishing phishing-as-a-service service telegram tool