Attackers target IT service desks to bypass MFA through impersonation
PHISHINGredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Attackers impersonate employees at IT service desks to persuade staff to reset passwords or register new authentication devices, bypassing MFA. Specops Software argues that traditional identity verification is no longer sufficient. The article focuses on securing account recovery processes against social engineering.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Review how account recovery and password resets are verified at the service desk against social engineering.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
BleepingComputer