#mfa-fatigue — Public Fediverse posts

Apparemment y’a un gros pic d’attaques “MFA fatigue” sur des comptes Microsoft / M365 "personnels" via les notifications MS Authenticator.

Plusieurs personnes avec un compte M365 m’ont reporté le problème, et la tendance se voit aussi très bien avec une recherche sur les forums Microsoft sur le dernier mois.

Ces tentatives de connexion / reset n’apparaissent pas dans l’Activity Log (du moins côté utilisateur)

⚠️ Changer le mot de passe ne mitige pas : ces notifs répétées sont très probablement basées sur des adresses perso connues/leakées, via des flows reset / OAuth répétés et probablement automatisés.

La seule mitigation documentée : cacher l’adresse mail “connue” en passant par un alias (et en le mettant en alias principal).

Pour créer un nouvel alias : https://account.live.com/AddAssocId

➡️ Puis le définir comme alias principal.

• https://learn.microsoft.com/en-my/answers/questions/5691418/constant-sign-in-requests-on-mfa

• https://learn.microsoft.com/en-us/answers/questions/5703380/repeated-unauthorized-login-attempts-triggering-2f

• https://www.reddit.com/r/ComputerSecurity/comments/1qenwp1/repeated_microsoft_authenticator_login_requests/

• https://www.reddit.com/r/techsupport/comments/1qg6idv/authenticator_keeps_sending_login_request_to_ms/

#CybeVeille #MFAfatigue #Microsoft #Microsoft365

l+f: Nie mehr arbeiten dank #Cybercrime | heise online https://www.heise.de/news/l-f-Nie-mehr-arbeiten-dank-Cybercrime-10679732.html #MFABombing #MFA #MFAFatigue #MultiFaktorAuthentifizierung #MultiFactorAuthentification #MultiFactorAuthentication #Ransomware #Malware

#MFA #Cybercrime #Hacking #Authentication #Phishing #MFABypass #SimSwapping #SocialEngineering #MFAFatigue #SecurityAwareness #DefenseInDepth #CyberSecurity #PhishingResistantMFA #EndpointDetection #EDR #IncidentResponse #Security #CyberAttack #Darkweb #CybercrimeInfo #HumanFactor

https://www.ccinfo.nl/menu-onderwijs-ontwikkeling/cybercrime/hacking/2251399_mfa-bypass-ontrafeld-waarom-meerfactor-authenticatie-niet-volstaat

"#PushBombing": Erneut Angriffe auf #iPhone-Nutzer | Mac & i https://www.heise.de/news/Push-Bombing-Erneut-Angriffe-auf-iPhone-Nutzer-9669386.html #MFAFatigue #Apple :apple_inc:

Apple's latest M-series chips are really living up to their name - M for "Makes security easy to bypass!" 🥲 the M chips leak encryption keys through their hardware.. So there's no easy fix without slowing the chips down to prehistoric era 📛
https://9to5mac.com/2024/03/22/unpatchable-security-flaw-mac/

Not only can they not keep your data safe, but now they're letting attackers bombard you with MFA prompts until you crack. Seems like the only thing these chips are good at multiplying is the number of security vulnerabilities.

@briankrebs
https://krebsonsecurity.com/2024/03/recent-mfa-bombing-attacks-targeting-apple-users/

#Apple #SecurityFail #MFAFatigue

Recent ‘MFA Bombing’ Attacks Targeting Apple Users

https://krebsonsecurity.com/2024/03/recent-mfa-bombing-attacks-targeting-apple-users/

#AppleRecoveryKey #ALittleSunshine #LatestWarnings #TheComingStorm #PeopleDataLabs #KishanBagaria #MFAbombing #MFAfatigue #ParthPatel #apple

Recent ‘MFA Bombing’ Attacks Targeting Apple Users https://krebsonsecurity.com/2024/03/recent-mfa-bombing-attacks-targeting-apple-users/ #AppleRecoveryKey #ALittleSunshine #LatestWarnings #TheComingStorm #PeopleDataLabs #KishanBagaria #MFAbombing #MFAfatigue #ParthPatel #apple

My team just released a new MFA bombing testing tool. It can be used in purple & red team modes to execute MFA fatigue/spamming/bombing on #Okta users. After we'll add more IdPs
AFAIK it is the first MFA bombing tool for Okta.

Https://github.com/authomize/mfa-bombing

#mfa #mfabombing #purpleteam #blueteam #redteam #RedTeamBlues #toolbox #mfafatigue #purplet

Weißt Du, was #MFA #Fatigue ist? Nein? Solltest Du aber und auch wie Du dich schützen kannst. Schau in unseren Blogbeitrag dazu https://so-arbeiten-wir-morgen.de/cyber-security/

#MFAFatigue #Security #StaySafe 😄