• Pass-the-Cookie: This is when hackers steal browser cookies that store user authentication information and use them to access web applications without MFA. For example, a hacker could use a tool like Mimikatz to extract and decrypt the cookies from a user's Chrome browser and then use them to log into the Microsoft Azure management portal1
• MFA fatigue: Hackers bombard users with MFA requests until they accept fraudulent ones. For example, a hacker could use a phishing email to get a user's credentials and then repeatedly send push notifications or text messages to their device, hoping the user will eventually approve one.
• Machine-in-the-Middle: This is when hackers intercept the communication between a user and an MFA system and relay it to a malicious server. For example, a hacker could use malware or a rogue browser extension to capture the user's keystrokes and MFA codes and then use them to log into their account.
• Token theft attack: This is when hackers steal or clone the physical device or software that generates MFA codes for a user. For example, a hacker could use social engineering or physical access to get a user's hardware token or smartphone and then use it to generate MFA codes for their account.