Blog Post

Microsoft Entra Blog
4 MIN READ

Defend your users from MFA fatigue attacks

Alex Weinert's avatar
Alex Weinert
Former Employee
Sep 28, 2022
Protecting users from MFA fatigue attacks    With increasing adoption of strong authentication, https://www.itworldcanada.com/post/hackers-use-mfa-fatigue-to-bypass-multi-factor-authentication (a...
Updated Sep 29, 2022
Version 4.0
identity and access management
Alex Weinert's avatar
Former Employee
Joined October 02, 2018
View Profile
Microsoft Entra Blog
Stay informed on how to secure access for employees, customers, and non-human identities, from anywhere, to multicloud and on-premises resources, with comprehensive identity and network access solutions powered by AI.
Karl-WE's avatar
Karl-WE
MVP
Sep 29, 2022

Great analysis!

I really hope that the investigation will lead to improvements for usual MS Accounts.

 

Currently, if a user uses Microsoft Authenticator and has enabled MFA and opt-in to a #passwordless MSA sign-in, it becomes mandatory to deliver a mobile phone number, which is usually both on the same device.