MFA Fatigue

An attack technique that bombards a user with MFA push notifications until they accept one out of frustration or by mistake. MFA fatigue was used in the Uber and Cisco compromises in 2022. Countermeasures include number matching, limiting attempt count, and FIDO2 keys.