Fraudulent third-party MFA providers can steal passwords during logins
Security researchers have developed an attack that allows hackers with privileged access to register a rogue third-party MFA provider that steals users’ passwords during legitimate login attempts. The technique, which Varonis Threat Labs calls TrustSink, can work with any vendor that relies on this external authentication model, although researchers demonstrated the attack using Microsoft Entra. … Read more