How Threat Actors Bypass Multi-Factor Authentication

Update: 2024-09-26

Description

Josh Fleischer, Principal Security Analyst with Mandiant's Managed Defense organization sits down with host Luke McNamara to discuss trends in MFA bypass and how threat actors are conducting adversary in the middle (AiTM) attacks to gain access to targeted organizations. Josh walks through a case study of MFA bypass, how token theft occurs, the increasing amount of AiTM activity with more features being added to phishing kits, and more.

Comments

Top Podcasts

The Best New Comedy Podcast Right Now – June 2024 The Best News Podcast Right Now – June 2024 The Best New Business Podcast Right Now – June 2024 The Best New Sports Podcast Right Now – June 2024 The Best New True Crime Podcast Right Now – June 2024 The Best New Joe Rogan Experience Podcast Right Now – June 20 The Best New Dan Bongino Show Podcast Right Now – June 20 The Best New Mark Levin Podcast – June 2024

In Channel

The Art of Remediation in Incident Response

2024-12-0240:59

How to Run an Effective Tabletop Exercise

2024-10-1829:14

Using LLMs to Analyze Windows Binaries

2024-10-0436:40

How Threat Actors Bypass Multi-Factor Authentication

2024-09-2627:20

TAG's Work Tracking Commercial Surveillance Vendors

2024-09-0423:58

What Iranian Threat Actors Have Been Up To This Year

2024-07-2536:13

Mandiant's Approach to Securely Using AI Solutions

2024-06-2732:00

Lessons Learned from Responding to Cloud Compromises

2024-06-0330:16

The ORB Networks

2024-05-2229:54

Investigations Into Zero-Day Exploitation of the Ivanti Connect Secure Appliances

2024-05-1627:47

M-Trends 2024 with Mandiant Consulting Vice President Jurgen Kutscher

2024-04-2925:53

Assessing the State of Multifaceted Extortion Operations

2024-04-1140:54

Hunting for "Living off the Land" Activity

2024-03-2942:32

Director of NSA's Cybersecurity Collaboration Center on Trends in 2024

2024-03-1425:48

The North Korean IT Workers

2024-02-2134:40

Prescriptions for a Healthy Cybersecurity Future with Google Cloud's OCISO

2024-02-0744:27

Is The CTI Lifecycle Due For An Update?

2024-01-2528:08

Threat Trends: Hacktivists' Continued Use of DDoS

2024-01-1044:50

Threat Trends: Tales from the 2023 Trenches

2023-12-1237:47

Threat Trends: DHS Secretary Alejandro Mayorkas in Conversation with Kevin Mandia

2023-10-2520:44

00:00

How Threat Actors Bypass Multi-Factor Authentication

#box-pro-ellipsis-17364998242434{-webkit-line-clamp:2;}How Threat Actors Bypass Multi-Factor Authentication

How Threat Actors Bypass Multi-Factor Authentication

Mandiant

How Threat Actors Bypass Multi-Factor Authentication