{"id":15777,"date":"2022-03-30T21:35:38","date_gmt":"2022-03-30T21:35:38","guid":{"rendered":"https:\/\/mssolutions.ca\/?p=15777"},"modified":"2023-10-10T19:02:09","modified_gmt":"2023-10-10T19:02:09","slug":"protect-your-microsoft-365-account-from-mfa-fatigue-attacks","status":"publish","type":"post","link":"https:\/\/mssolutions.ca\/en\/blogue\/news-en\/protect-your-microsoft-365-account-from-mfa-fatigue-attacks\/","title":{"rendered":"Protect Your Microsoft 365 Account From MFA Fatigue Attacks"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Multi-factor authentication (or MFA) is a great way to protect your Microsoft 365<\/a> accounts from malicious people trying to access them. It\u2019s a secondary form of protection, on top of your normal password, that creates a second step in the login process in order to verify the user\u2019s identity.<\/h4>

Although the intention behind this 2-tier authentication method is to protect us, attackers have started looking for ways to compromise it. And unfortunately MFA does not always prevent cyber attacks: there are several MFA fatigue attacks that particularly target Microsoft 365 users.<\/p>

But what is MFA fatigue, and how can you avoid being its next victim?<\/p>

\u00a0<\/h3>

What Is MFA fatigue?<\/b><\/h3>

The term MFA fatigue refers to an overload of notifications or invitations through applications configured with MFA. During the day, a user can receive several notices, from different platforms, in order to make connections or approve different actions related to their various accounts.<\/p>

In short, a hacker will first find your password and, finding that your account is protected by an MFA, send you a burst of authentication request notices in the hope that it tires you to the point that you blindly accept a connection request. IT professionals have observed a significant increase in the number of attacks performed using this technique. Highly motivated and known hackers are actively using this type of method to break into Microsoft 365 accounts and compromise entire organizations.<\/p>

What Happens If Hackers Gain Access To My Microsoft 365 Account?<\/h3>

Hackers using this attack technique rely almost entirely on the human factor, and human error. By quickly sending someone several MFA notices, they hope that the user will accept the authentication and thus give hackers access to their account. This usually happens because the user is distracted or overwhelmed by the notifications, and in some cases it can be misinterpreted as a bug, or confused with other legitimate authentication requests.<\/p>

This attack is particularly effective not because
of the technology involved, but because
it targets the human factor of MFA.<\/strong><\/p><\/blockquote>

Many MFA users are unfamiliar with this type of attack and would not understand that they are approving a fraudulent notification. Others just want it to go away and are not aware of what they are doing, since they approve similar notifications all the time. In this context, they cannot see through the notification overload and identify the threat.<\/p>

\u00a0<\/h3>

How To Detect Multiple Push Notification Attempts In Microsoft 365<\/h3>

This type of attack can be detected directly from the Azure portal by inspecting connection logs. We strongly recommend that IT professionals take the following steps:
<\/span><\/p>