166 terms · 75/46/45
kompozit · edukator režim · za predavanje i PDF

MFA Fatigue

Pretnja u centru, tehnike kojima se izvodi levo, odbrane koje je suzbijaju desno. Ispod — mapa faza napada: kojom tehnikom se ulazi i koja odbrana je presreće.

↘ Techniques used to carry it out2

Techniques used to carry it out. Klik vodi na stranicu pojma.

threat · № 024 · identity

MFA Fatigue

MFA fatigue is social-engineering pressure applied to two-factor authentication. The attacker has the password, leaked or phished, but is stopped at the second factor — a confirmation the user has to approve on their phone. So the attacker starts the login over and over, burying the phone in approval requests. The arithmetic is simple: out of irritation, confusion, or the thought that it must be some glitch, the user approves one at some point — and the attacker is through the whole authentication.

↓ izvor: prvi po vezama Najčešći ulaz: Credential Abuse. Ključna odbrana: Logging & Monitoring.

↗ How it is defended against4