logo

Apple OTP FAIL: ‘MFA Bomb’ Warning — Locks Accounts, Wipes iPhones

ID: b6e8e292-3652-5b70-84a0-d81ef068175d

STIX ID: report--b6e8e292-3652-5b70-84a0-d81ef068175d

Feed Name: Security Boulevard

Threat Score
55/100

Date Published: 2024-03-28

Date Updated: 2026-04-22

Author: Richi Jennings

...
...

**Executive summary:** Recent reports describe "MFA bombing" attacks against Apple users in which attackers trigger numerous unskippable password-reset prompts across a victim's devices to induce fatigue, then call while spoofing Apple Support to obtain one-time reset codes and take over accounts; the coverage highlights an apparent lack of rate-limiting in Apple's authentication flow and recommends user mitigations such as hanging up, contacting Apple via official channels, and using strong 2FA practices.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.