hard20 pts · first answer countsidentity-securityphishing-analysis
Phishing that bypasses MFA
Users completed MFA on what looked like the real login page, yet attackers later used their sessions. Logs show the sign-in came through a reverse proxy domain. Which control would have stopped this attack?
Discussion 0
Join free to post in the discussion.
Related questions
- Where to see SPF, DKIM and DMARC resultsCybersecurity Analyst
- Which login is really two-factor?Cybersecurity Analyst
- What is spear phishing?Cybersecurity Analyst
- Why passwords are saltedCybersecurity Analyst
- What does SPF check?Cybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- Suspicious process tree in EDRCybersecurity Analyst
- What DMARC p=none doesCybersecurity Analyst