Hackers Are Using These 3 Techniques to Bypass MFA

**Executive summary:** This article describes common methods used to bypass multi-factor authentication (social engineering and phishing proxies that steal credentials and session cookies, MFA push "fatigue" attacks, SMS OTP weaknesses and SIM swapping), and recommends mitigations including stronger passwords, employee training, authenticator apps or biometrics, and having incident response capabilities.