MFA Fatigue Is the New Phish
Train staff to treat unexpected authentication prompts as attacks, not annoyances.
Saved only in this browser. No account needed. Does not sync. Clearing browser data removes the list.
Published
Attackers with stolen passwords now bomb employees with push notifications until someone taps approve just to stop the noise. One tired approval defeats the entire control. Number-matching prompts and a clear 'report, don't approve' protocol close the gap.
“An unexpected MFA prompt isn't a glitch. It's an attacker knocking.”