Tag

Number Matching

All articles tagged with #number matching

cybersecurity2 years ago

Microsoft's Authenticator now uses number matching to combat MFA fatigue attacks.

Microsoft is introducing a number-matching feature in its Authenticator app to combat MFA fatigue, a social engineering tactic that overwhelms users with push notifications asking for login approval. The feature adds a one-time code element to the push notification approach, requiring users to enter another number to complete the login process. The number matching feature will be automatically enabled for all push notifications in Authenticator, and users will not be able to opt out of the feature. The change will be deployed starting this week.

cybersecurity2 years ago

Microsoft Implements Number Matching MFA to Combat Fatigue Attacks

Microsoft has started enforcing number matching in Microsoft Authenticator push notifications to combat multi-factor authentication (MFA) fatigue attacks. Cybercriminals use MFA push spam to flood targets with mobile push notifications asking them to approve attempts to log into their corporate accounts using stolen credentials. Microsoft will start enforcing number matching for Microsoft Authenticator MFA alerts to block MFA fatigue attack attempts across tenants beginning May 8, 2023. Users can manually enable number matching before Microsoft removes the admin controls.

technology2 years ago

Microsoft's Authenticator now defaults to number matching for MFA security.

Microsoft is enforcing "number matching" as an additional step in its Authenticator app to enhance the security provided by Multi-Factor Authentication (MFA) for all users starting May 8, 2023. Users will need to enter the number provided into their Authenticator app when signing in. This is to combat MFA attacks such as phishing, brute forcing, and push bombing attacks. Microsoft highly recommends enabling number matching for improved sign-in security.