"Apple Users Beware: MFA Bombing Attack Prompts Endless Password Resets"
Attackers are targeting iPhone users with "MFA fatigue" attacks, bombarding devices with endless password reset prompts and even spoofed calls from "Apple support." This technique, also known as MFA prompt bombing, aims to overwhelm users with multifactor authentication requests, making it difficult to distinguish legitimate prompts from fake ones. Apple's password-reset scheme is vulnerable to these attacks, and experts recommend implementing rate limiting and FIDO-compliant MFA to mitigate the risk. Users are advised to be cautious of unsolicited calls and report suspicious activity to authorities.
