Anatomy of the Attack: The Rise and Fall of MFA
summary
Three case studies show how MFA survives technical scrutiny but loses to process: a Russian state actor brute forces an orphaned AD account, enrolls it via orphaned account enrollment via Duo, alters a domain controller hosts file and exploits PrintNightmare to bypass fail‑open MFA; LAPSUS$ compromises Sitel VPN to reset Okta tenant admin access via support tooling; and an attacker uses repeated push notifications and social engineering—prompt bombing (MFA fatigue)—to reach Uber’s PAM and AWS keys. Key metrics cited: ~78% MFA adoption and 82% of breaches involve the human element.
AI-written summary · about
chapters (4)
- 0:00Introduction to MFA threats
- 10:37Three major MFA attacks
- 24:22Zero Trust and risk-based MFA
- 33:54Key takeaways and solutions
related talks
26mMake MFA More Resilient
45mMFA: Stories that make you go 'Huh?'
47mBreaking the Next Factor – Live Multi-Factor Authentication (MFA) Hacking
40mPurple Team Auth: Hacking & Bypassing MFA Systems, and How to Armor Up
50mOne Does Not Simply Add MFA
19mAdvanced Authentication Framework
25mStrategies for Better MFA
26mMFA for All