Breach404
Back to Insights
Cybersecurity2 min readAugust 4, 2026

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

Attackers are using a new phishing technique called device code phishing that tricks users into authorizing malicious applications, bypassing multi-factor authentication protections and stealing authentication tokens that grant access to corporate systems

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site - headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now - It's Free