An MFA fatigue attack bombards a user with repeated MFA push notifications hoping they’ll approve one out of annoyance, confusion, or accident.
Why it matters:
- A top tactic in major breaches.
- Exploits human behavior rather than technical flaws.
Pro tip: If you’re spammed with MFA prompts, deny them all and report it — it means someone has your password.
Synonyms:
Push Bombing