An attack where the adversary repeatedly triggers MFA push notifications to the target's device, hoping the user will eventually approve one out of frustration or confusion. Also known as MFA bombing or push notification spam.
Related Terms
Credential Stuffing
authenticationAn automated attack that uses stolen username-password pairs from data breaches to attempt login on other services. This...
Multi-Factor Authentication (MFA)
authenticationA security mechanism requiring two or more independent forms of verification to confirm identity. Factors include someth...
Social Engineering
social-engineeringThe psychological manipulation of people into performing actions or divulging confidential information. Social engineeri...