Why MFA is getting easer to bypass and what to do about it
arstechnica.comPublished: 5/1/2025
Summary
Phishing attacks have surged, exploiting gaps in multifactor authentication (MFA) to bypass security, even tricking non-technical users into compromising accounts. Attackers use tools like Tycoon 2FA and Greatness to set up proxy servers and generate fake login pages that deceive victims. These tactics make it easier for criminals to access sensitive information without real-world security checks in place.