You've probably heard the term MFA, or multifactor authentication, at least once in your life. In recent years, most experts have advised that one of the most reliable ways to prevent cyberattacks is to implement software that uses this very same multifactor authentication.
It's the process by which a user attempts to log in to a site with password , but then requires the use of an additional form of authentication, usually in the form of a special personal identification number (PIN) sent to their smartphone. And as experts have said over the years, even if a hacker steals your password, it's unlikely they'll be able to manipulate your smartphone at the same time, so MFA is truly secure. Or is it?
According to the FBI, not so much, as it stated that there is a growing threat of attacks against organizations and employees that can bypass MFA.
The most well-known threats are three.
- SIM exchange.
This happens when a hacker steals enough information about you online and can call your phone company, impersonate you, and convince them to redirect all calls to a smartphone they own. Their phone contains a new SIM card that contains your information, which they obtained through hacking or purchased on the dark web. This way, they receive text messages with a special MFA code and gain access to those accounts .
- Website manipulation.
If a website is not designed properly, a skilled hacker can bypass login pages where a PIN is required and directly access the account holder's details and then make transactions.
- Social Engineering .
Hackers trick users into giving up information they shouldn't. This is done through phishing , or fake websites where victims provide vital information about themselves.
This news seems somewhat disappointing, but the FBI still recommends using MFA. As they state, it may not be the perfect solution, but it is getting close to it. That is why we are all invited to choose this way for the cybersecurity of our systems, in the hope that a better option will come out soon, as over the years, as hacking increases, multifactor authentication is weakened.
