Aanvallers misbruiken IT-helpdesks voor MFA-omzeiling via social engineering

Cybercriminals are targeting IT service desks by impersonating employees to trick staff into resetting passwords or registering new authentication devices, successfully bypassing multi-factor authentication. Organizations must strengthen their identity verification during account recovery procedures to defend against these social engineering tactics.