🚀 Medial just raised $500k in Pre-Series A. Tap to read the announcement. 🎉
Login

News on Medial

How Google Authenticator made one company’s network breach much, much worse

ArstechnicaArstechnica · 1y
How Google Authenticator made one company’s network breach much, much worse

Security company Retool criticized Google's authenticator app for making a recent internal network breach worse. The breach resulted in attackers gaining access to the accounts of 27 customers in the cryptocurrency industry. The attack started when a Retool employee clicked on a text message link claiming to be from the company's IT team. The employee logged into the linked site and provided a password and a temporary one-time password (TOTP) from Google authenticator. The attackers then called the employee, claiming to be an IT team member, and obtained an additional multi-factor code. Retool argues that Google's recent synchronization feature for authenticator codes is highly insecure, as it allowed the attackers to compromise multiple company accounts.

View Source

Comments

More Like this

Microsoft ditches Android for Apple iPhones in China, citing security and authentication issues | Mint

Microsoft ditches Android for Apple iPhones in China, citing security and authentication issues | Mint

Android 15 might soon be able to protect your two-factor authentication codes

Android 15 might soon be able to protect your two-factor authentication codes

Top global network service provider apparently leaks hundreds of millions of user accounts

Top global network service provider apparently leaks hundreds of millions of user accounts

Indian-origin CEO defends 84-hour work week, says 'It's like a rocket launch'

Indian-origin CEO defends 84-hour work week, says 'It's like a rocket launch'

Microsoft Exposes How Hackers Stole Email Signing Key

Microsoft Exposes How Hackers Stole Email Signing Key

Exclusive: Cloud telephony platform Exotel suffers data breach

Exclusive: Cloud telephony platform Exotel suffers data breach

SEC ramps up hack probe with focus on tech, telecom companies

SEC ramps up hack probe with focus on tech, telecom companies

Generative AI moving tech outside IT departments: Google Cloud CEO Thomas Kurian

Generative AI moving tech outside IT departments: Google Cloud CEO Thomas Kurian

This Exec Is Forcing Google Into Its First Trial Over Sexist Pay Discrimination

This Exec Is Forcing Google Into Its First Trial Over Sexist Pay Discrimination

Google just can't seem to catch a break

Google just can't seem to catch a break

Download the medial app to read full posts, comements and news.