corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a07df3-579a-71d1-bdfb-c051bf9a5b60

How threat actors bypass multifactor authentication

Intel 471 · published 22 October 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at intel471.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
29
Words captured
1,809

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.cisecurity.org/insights/blog/how-to-secure-your-online-identity-with-security-keys
cisecurity.org
https://www.ncsc.gov.uk/guidance/business-communications-sms-and-telephone-best-practice
ncsc.gov.uk
https://www.ncsc.gov.uk/collection/device-security-guidance/policies-and-settings/using-biometrics
ncsc.gov.uk
https://www.group-ib.com/blog/0ktapus/
group-ib.com
https://www.cisa.gov/sites/default/files/2023-08/CSRB_Lapsus%24_508c.pdf
cisa.gov
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-320a
cisa.gov
https://www.microsoft.com/en-us/security/business/security-101/what-is-fido2
microsoft.com
https://www.okta.com/blog/identity-security/what-is-webauthn/
okta.com
https://www.yubico.com/authentication-standards/fido2/
yubico.com
https://www.cisa.gov/sites/default/files/publications/fact-sheet-implementing-phishing-resistant-mfa-508c.pdf
cisa.gov
https://www.justice.gov/usao-dc/pr/justice-department-seeks-forfeiture-over-5-million-bitcoin-stolen-sim-swapping-scams
justice.gov
https://docs.fcc.gov/public/attachments/DOC-398483A1.pdf
docs.fcc.gov
https://www.proofpoint.com/au/blog/information-protection/preventing-mfa-fatigue-attacks
proofpoint.com
https://www.orangecyberdefense.com/global/blog/research/residential-proxies
orangecyberdefense.com
https://github.com/kgretzky/evilginx2
github.com
https://blog.knowbe4.com/phishing-kits-are-growing-more-sophisticated
blog.knowbe4.com
https://www.cyber.gov.au/sites/default/files/2023-03/PROTECT%20-%20Defending%20Against%20the%20Malicious%20Use%20of%20the%20Tor%20Network%20%28October%202021%29.pdf
cyber.gov.au
https://oauth.net/2/
oauth.net
https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift
cloud.google.com
https://developer.okta.com/blog/2024/09/05/dpop-oauth
developer.okta.com
https://datatracker.ietf.org/doc/rfc9449/
datatracker.ietf.org
https://learn.microsoft.com/en-us/entra/msal/dotnet/advanced/proof-of-possession-tokens
learn.microsoft.com
https://developer.okta.com/docs/guides/dpop/nonoktaresourceserver/main/
developer.okta.com
https://docs.verify.ibm.com/verify/docs/oauth-20-dpop
docs.verify.ibm.com
https://oauth.net/ipsie/
oauth.net
https://curity.io/resources/learn/oauth-revoke/
curity.io
https://www.intel471.com/platform/adversary-intelligence
intel471.com
https://www.intel471.com/platform/malware-intelligence
intel471.com
https://www.intel471.com/company/contact
intel471.com