Attacks against Multi-factor Authentication

There is no such thing as bulletproof authentication, and multi-factor authentication (MFA) is not bulletproof either. There are attacks against MFA. In this paper, we not only present a historical outline of the most significant MFA attacks but also review the available taxonomy tools. Our aim is to equip enterprises with a clear understanding of how MFA attacks may occur and how these are classified. More importantly, we provide proactive considerations on how MFA attacks may be prevented, empowering enterprises to take action.