Rogue external MFA providers can reportedly steal passwords during logins
BleepingComputer reports that researchers developed an attack allowing hackers with privileged access to register a rogue authentication provider and steal passwords.
TLDR
BleepingComputer reports that security researchers developed an attack involving a rogue external multifactor authentication (MFA) provider. Hackers with privileged access can register the provider, which steals users’ passwords during legitimate login attempts.
Combined views
7.8K
1 Source, first seen ago