Hey folks,
In this blog, I am going to tell you about an amazing addition to our family of credential compromise detection capabilities – this one uses our machine learning technology and globa...
Updated Oct 26, 2020
Version 4.0
Blog Post
well, when password spray is used and finds the password -> the MFA triggers -> attacker knows, that the User/password combination is correct.
then next step is done. MFA bombing the user with MFA requests. And the user could act as expected: I have so many apps, that triggers the MFA prompt, so even thou I am not aware of actual sign in interactive request, some app is authenticating on background, so I confirm the MFA. and attacker is inside. 🤔