Current MFA Fatigue Attack Campaign Targeting Microsoft Office 365 Users

Abstract: 

The article discusses a new attack vector called MFA Fatigue, which is a result of the overload of notifications or prompts via Multi-factor Authentication (MFA) applications, and the article specifically focuses on push notification spamming. The attack works by repeatedly sending push notifications while attempting to log into the victim's account, which can mislead the user to approve a fraudulent notification. The article provides steps for IT professionals to detect and mitigate these attacks within their organizations. The article also highlights that MFA users are not familiar with this type of attack and need to be aware of the threat.

Author: 

Lisandro Ubiedo

Year: 

2023

Domain: 

Dimension: 

Region: 

Data Type: 

Keywords: