Threat Actor ProKYC Selling Tools To Bypass Two-Factor Authentication (gbhackers.com)
from kid@sh.itjust.works to cybersecurity@sh.itjust.works on 11 Oct 2024 14:56
https://sh.itjust.works/post/26476343

#cybersecurity

threaded - newest

jet@hackertalks.com on 11 Oct 2024 15:13 next collapse

If it can be bypassed, it’s not a second factor

cron@feddit.org on 11 Oct 2024 15:21 collapse

There are some legitimate attacks on MFA, like stealing cookies. But in most cases, MFA is solid and attackers target the humans behind it (phishing, scamming, social engineering).

cron@feddit.org on 11 Oct 2024 15:16 collapse

Not really a MFA bypass, but rather some impressive social engineering:

The attacker leverages AI-generated deepfakes to create a synthetic identity complete with a forged government document (e.g., passport) and a facial recognition bypass video.

They use this identity to gain access to the account, if I understood it right.

Breve@pawb.social on 11 Oct 2024 16:34 collapse

It’s to get around the KYC (Know Your Client) requirements that many financial institutions and cryptocurrency exchanges have when creating a new account to curb money laundering. Obviously criminals using crypto for dark markets need a way to convert it back to cash without giving up their real identity.