Current MFA fatigue attack campaign targeting Microsoft Office 365 users

Re:Current MFA fatigue attack campaign targeting Microsoft O... by tempfs on Wednesday February 16, 2022 @04:07PM (#30365688)

My favorite fuckup is when the MS Authenticator itself tells me that it needs me to use MS Authenticator to verify who I am, so it sends a code to itself.

You can't make this shit up.

[ Parent | on HN ]

Re:Current MFA fatigue attack campaign targeting Microsoft O... by datavirtue on Wednesday February 16, 2022 @06:21PM (#30367232)

And yet, you did.

[ Parent | on HN ]

Re:Current MFA fatigue attack campaign targeting Microsoft O... by jbm on Wednesday February 16, 2022 @11:48PM (#30369609)

I have had Microsoft Teams open up Microsoft Authenticator and ask me to input my password, twice, and then (within Authenticator) ask me to click a button to get to Authenticator to get a 2fa code - again, while in Authenticator.

It's awful and I believe it's completely possible that some set of conditions lead to what the parent described.

[ Parent | on HN ]

Re:Current MFA fatigue attack campaign targeting Microsoft O... by aaaaaaaaata on Thursday February 17, 2022 @12:46PM (#30376174)

zk proofs

[ Parent | on HN ]