Apple Users Beware of MFA Bombing Scheme

Posted on:

April 11, 2024

If you’re an Apple user, there’s a new cyber threat making the rounds lately – MFA Bombing. A multi-factor authentication fatigue attack – AKA MFA Bombing – relies on overwhelming the victim with repeated prompts to reset their password. These requests are not from Apple. The intention is to either coerce the victim into accepting the prompts or to induce errors that could lead to a password reset.

Reports from sources like Krebs on Security highlight similar attacks targeting IT professionals and other individuals, particularly through the theft of Apple IDs. Users have also reported receiving calls from fraudulent Apple Support agents. Never share your reset code/password over the phone.

The objective of the phishing attacks is to prompt an Apple ID reset code. If the user unwittingly provides this one-time code, the attackers gain the ability to reset the password associated with the account, locking the legitimate user out. Additionally, they then remotely wipe all of the user’s Apple devices, further compromising their digital security and potentially causing significant data loss.

Protect Yourself

Stay vigilant! If something seems fishy, take a step back and assess the situation before acting. Take your time to carefully dismiss each request. Apple has acknowledged the issue and reminds users to stay cautious. If you’re ever unsure about a password reset request, double-check directly with Apple. It’s better to be safe than sorry.

Armed with the right knowledge and a healthy dose of skepticism, you can outsmart the scammers and keep your Apple ID safe and sound.