MFA is Phishable

Multi factor authentication (MFA) is seen as a strong means of security, but can be less so, here some reasons why.

Why Is the Majority of Our MFA So Phishable?

Published on October 20, 2021

By Roger Grimes in Linkedin,   Data-Driven Defense Evangelist at KnowBe4

The huge push to multifactor authentication (MFA) is ostensibly to help people avoid getting so easily phished. But are we making the same mistake with MFA and making too much of it too easily phishable? Will we be pushing our organizations and end-users to MFA only to repeat many of the same mistakes? The US government is worried about it. You should be worried as well.

The U.S. government has been pushing people to avoid SMS- and voice call-based multifactor authentication (MFA) for years, but their most recent warning is to avoid any MFA that is overly susceptible to phishing. That is only commonsense (since most data breaches involve social engineering), but what MFA types do they mean and what does that mean for you? Read on.   ... '