TLDR InfoSec · MISCELLANEOUS

RECENT ‘MFA BOMBING’ ATTACKS TARGETING APPLE USERS

krebsonsecurity.com7 min read

Summary from the TLDR InfoSec newsletter

Apple users have recently been targeted in phishing attacks where scammers exploit a bug in Apple's password reset feature. The attack inundates target devices with system prompts that must be approved or declined repeatedly. The scammers then call the victims posing as Apple support to obtain one-time codes for account resets.