Last year, several German banks withdrew SMS as a 2FA option for just this reason.Ĭheck Point warned of an SMS 2FA attack just last month, “an Android backdoor that extracts two-factor authentication codes from SMS messages, records the phone’s voice surroundings and more.” The “ Rampant Kitten” operation, attributed to Iranian hackers, intercepted 2FA codes for otherwise secure Google and Telegram accounts. You need two-factor authentication. But where this uses SMS messaging, that’s also vulnerable to compromise-albeit such compromises remain comparatively and thankfully rare-but it is becoming more of an issue. We know that through data breaches, password reuse and reliance on common, easy to guess password combinations, usernames and passwords are wide open to attack.
0 kommentar(er)
