MFA Bypass Attacks: Push Bombing and SIM Swapping Exploits

• •Push bombing overwhelms users with MFA requests, leading to potential account compromise.
• •SIM swapping exploits vulnerabilities in telecommunications to bypass MFA.
• •Organizations are advised to implement additional verification measures to mitigate risks.

Cybercriminals are employing fatigue attacks, specifically push bombing and SIM swapping, to bypass multi-factor authentication (MFA) mechanisms. These attacks flood users with repeated MFA requests, leading them to approve malicious requests to stop the barrage. This method has been linked to breaches, including a notable incident involving Cisco in 2023. Attackers exploit user behavior and telecommunications infrastructure rather than cryptographic weaknesses, making detection challenging. Organizations relying on SMS for authentication are particularly vulnerable to SIM swapping, where attackers gain control of a victim's phone number. The scale of push bombing can overwhelm users, especially during high-stress periods, leading to significant security and availability risks. Recommendations include implementing number matching or biometric confirmation to enhance security. The current status of these attack methods indicates an ongoing risk to organizations that utilize MFA without robust safeguards.