Hackers Bypass Multi-Factor Authentication by Exploiting Human Trust

For years, security advice emphasized strong passwords, unique credentials, and multi-factor authentication, leading many banks, social platforms, and employers to adopt these tools. Recent attacks, however, reveal criminals abandoning attempts to crack MFA and instead waiting for users to approve bogus login prompts that appear legitimate. The scheme exploits human trust, granting attackers full account access once a victim enters a password and clicks the approval.

Older Americans, who depend on online banking, retirement accounts, and telehealth services, are particularly vulnerable. The article notes that even Mac users are no longer insulated, as macOS malware rises alongside broader targeting of user habits. Small businesses also face risks, as traditional antivirus solutions often miss credential-based attacks, prompting a shift toward continuous endpoint monitoring. Overall, the piece stresses that cybersecurity now hinges on educating users to recognize social-engineering tricks, not just deploying technical safeguards.