Greatness' phishing-as-a-service (PhaaS) service has grown its toolkit, allowing cybercriminals to target Microsoft 365 accounts through sophisticated methods like adversary-in-the-middle (AiTM) phishing, device-code attacks, and OAuth consent abuse This article explores greatness phishing service. . The platform is sold via a Telegram channel for $289 per month, offering operators a centralized dashboard, campaign statistics, customizable domains, CAPTCHA options, and over 11 pre-built lure templates.
Greatness has been actively targeting Microsoft 365 users since mid-2022, but its newer features indicate a shift away from simple password theft. The platform offers operators a centralized dashboard for managing their campaigns, detailed campaign statistics, customizable domains, CAPTCHA options, and pre-built lure templates that make it easier to create convincing phishing emails.
Available templates mirror typical business workflows, including voicemail alerts, document-sharing notifications, QR-code messages, OneDrive files, video players, and audio-login pages. The templates feature pre-built HTML files, PDF redirectors, SVG content, and letter-style lures, enabling operators to deploy campaigns without designing phishing pages from scratch. Phishing email body as rendered in the inbox: The email displays a spoofed trust banner claiming verification by the target organization's safe senders list, a Microsoft-styled "Open Message" button, and a multi-step instruction pretext themed as a voicemail notification (Source: zerobec) Victims who click a malicious link can be passed through a five-stage redirect chain.
