There are many userswho have no problem sharing some of their personal information online and on their social media.
This information may include schools they attend or have graduated from, pet names, favorite music or places to eat, and even nicknames they may use with their friends.
However, according to the FBI, many malicious actors could use this information to retrieve account passwords or take control of them.
It's important to carefully check the security on accounts to make sure no one else has access to them.
The FBI also recommends always enabling two-factor authentication (2FA) or multi-factor authentication (MFA), wherever this is possible.
Microsoft and Google both said the same thing last year , explaining that MFA is the way to go if you don't want your online profiles compromised after an attack. As they said, a user's account is more than 99.9% less likely to be compromised if they use MFA.
Google stated in a report that “simply adding a recovery phone number to your Google Account can block up to 100% of automated bots, 99% of mass phishing attacks, and 66% of targeted attacks.”
Although MFA can generally protect you from 99.9% of attacks targeting your online accounts, the FBI has discovered that there are actors who can bypass multi-factor authentication through social engineering and technical attacks.
The organization shared several examples of how malicious actors managed to bypass MFA between 2016 and 2019, including vulnerabilities in applications that handle MFA, SIM swapping attacks, and a 2FA circumvention toolkit consisting of the NecroBrowser and Muraena tools.
However, its use continues to be especially important for your security.
