Psychological Manipulation via Notification Spam
MFA Fatigue attacks rely on user distraction and annoyance. By launching an automated request script, the scammer generates dozens of push windows per minute. Sooner or later, the person either accidentally touches the approval button on the lock screen or approves it intentionally, thinking it's a system glitch.
How to Defend Against Authorization Spam Attacks
- Immediately change your account password upon the first unexpected push request.
- Reject simple 'Approve' taps in favor of Number Matching (entering digits displayed on screen).
- Temporarily disable push notifications and switch to hardware keys or TOTP codes.
- Terminate all third-party active sessions in the compromised service's security settings.