Attackers target IT service desks to bypass MFA through impersonation
PHISHINGredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Attackers are targeting IT service desks by impersonating employees to have staff reset passwords or register new authentication devices, which bypasses MFA. Specops Software argues that traditional identity verification methods are no longer sufficient for this threat. The article gives no CVEs or technical indicators. Defenders should review how account recovery and MFA device registration are verified against social engineering.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Review how account recovery and password resets are verified at the service desk against social engineering.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
BleepingComputer