Attackers target IT service desks to bypass MFA through impersonation
PHISHINGredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Criminals sometimes pretend to be employees and call IT service desks. They try to get staff to reset passwords or add new login devices, which lets them get past multi-factor authentication. A vendor article explains why basic identity checks are no longer enough.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Review how account recovery and password resets are verified at the service desk against social engineering.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
BleepingComputer