Summary
Microsoft 365 users are being targeted by a sophisticated phishing scheme that spoofs RingCentral emails, designed to steal accounts even with multi-factor authentication (MFA) enabled. Security researchers ZeroBEC identified the "Greatness" PhaaS platform, which has evolved to bypass MFA and target various accounts including iCloud, Yahoo, and Google Workspace.