Microsoft Authenticator suppresses suspicious MFA notifications

Microsoft has quietly rolled out a new mechanism that shields users of its mobile Authenticator app from suspicious (and annoying) push notifications triggered by attackers. Preventing attacks relying on MFA fatigue When faced with MFA-protected accounts, threat actors repeatedly try to gain access with stolen login credentials and thus trigger a barrage of authentication requests delivered via authenticator apps. Their hope is that the victim will accept one either by mistake or to stop the … More →

The post …

access account hijacking accounts app attackers attacks authentication authenticator authenticator app credentials don't miss hot stuff login login credentials mechanism mfa mfa fatigue microsoft microsoft authenticator mobile notifications push notifications social engineering stolen stolen login threat threat actors trigger try