Why multifactor authentication based on one-time-passwords and push notifications fails.
First seen on arstechnica.com
Jump to article: arstechnica.com/security/2025/05/phishing-attacks-that-defeat-mfa-are-easier-than-ever-so-what-are-we-to-do/
Why MFA is getting easer to bypass and what to do about it