Glossary: Threat Vectors: Files, Networks and Endpoints

MFA fatigue

Also written: push bombing, prompt bombing

An attacker who already has the password sends MFA prompt after prompt, hoping the person taps Approve to make it stop, as happened to Sam on a Saturday morning. The fix is a password reset plus number matching.