Telecom
What You Need to Know About Multifactor Authentication Fatigue Attacks and How they can be Prevented
Multifactor authentication is a security measure that requires users to provide a second form of verification before they can log into a corporate network. It has long been considered essential for keeping fraudsters out. However, cybercriminals have been discovering increasingly clever ways to bypass it.
During an attack on Uber’s IT systems in 2022, the hackers did not use any sophisticated tactics to gain access. Instead, they bombarded an employee with repeated login requests until, out of sheer frustration, the employee approved one.
This type of cyberattack is known as an “MFA fatigue attack” and poses a real risk to organisations, says Anna Collard, SVP Content Strategy and Evangelist at KnowBe4 AFRICA, a cybersecurity training designer.
“MFA fatigue attacks, also known as prompt spamming or authentication bombing, exploit human vulnerability, rather than relying on high-tech hacking methods,” she explains. “These attacks involve sending continuous push notifications to a target who has already provided their username and password, aiming to irritate or confuse them into unwittingly granting the attacker access to their account or system.”
With Uber, the attacker likely bought the contractor’s Uber corporate username and password on the dark web. The attacker then made repeated attempts to log into the victim’s Uber account. Each time, the victim received a request to approve a two-factor login, which blocked access at first. However, eventually, and after the attacker contacted the contractor on WhatsApp claiming they were from Uber IT and that the only way to get rid of the never ending notifications was to accept one, the contractor accepted one request, allowing the attacker to successfully log in.
Previously, cybersecurity experts believed that Multifactor Authentication (MFA) was a foolproof method to protect corporate IT systems from hackers. “Now we’re seeing attackers finding ways around it by bombarding the victim with scores of MFA requests or by tricking them over the phone,” says Collard. This tactic, similar to a swarm of bees overwhelming someone, is a simple yet effective social engineering technique used by hackers. “By bugging you repeatedly until you give in, malicious actors can manipulate users into approving fraudulent access attempts,” says Collard.
How can you prevent it?
The best way to prevent MFA fatigue attacks in organisations is not to use push notifications. “While MFA provides an extra layer of security, it’s not foolproof,” she asserts. “From a cybersecurity perspective, I would recommend that organisations disable push notifications altogether and rather use alternative verification methods.”
An example of a better verification method is number matching. “This involves matching a unique code provided by the authentication app with the code displayed on the screen during the login process,” explains Collard.
A challenge-response method is another effective way of providing additional security. This method asks a user a specific question to verify their identity or to perform a task in response to a challenge. “A challenge-response method is more difficult for hackers to bypass. It can involve mechanisms like biometric authentication, in which users must scan their fingerprints or irises or use facial recognition to gain access to a network.” However, both of the above are not immune against so-called man in the middle or social engineering attacks tricking the users to hand over their OTP or response to the fraudster.
Another effective verification method is FIDO2, an open authentication standard that allows users to log in without using passwords. “You can implement FIDO2 using hardware security keys,” she explains. Typically, USB sticks store the user’s private key, while the public key is stored on the authentication server. As soon as the user enters their username and password, the system requests them to use the hardware key. “It is more resistant to phishing as it works on a challenge-response protocol and doesn’t rely on a one-time PIN that can be intercepted,” she adds.
Mindfulness is key
As with all hacking attempts, it’s crucial that users remain calm and mindful, rather than reacting emotionally. “Stay tuned into your body’s responses when dealing with potential cybersecurity threats, whether they are phishing emails or MFA fatigue attacks,” says Collard. “If something feels strange, like if the situation is putting you under undue pressure, listen to that cue and don’t respond in a knee-jerk fashion. In this way, you’ll keep a straight head and thwart potential data breaches.”
Airtel Africa said on Tuesday it has partnered with SpaceX to introduce Starlink’s direct-to-cell satellite technology to all its 14 markets.
The satellite-to-mobile service will begin across Africa in 2026, with data for select applications and text messaging, Airtel Africa said in a statement.
Airtel Africa customers with compatible smartphones in regions without terrestrial coverage will have network connectivity through Starlink.
The deal also includes “support for Starlink’s first broadband Direct to Cell system, with next-generation satellites that will be capable of providing high-speed connectivity to smartphones with 20x improved data speed,” Airtel Africa said.
Last month, Kyivstar, Ukraine’s largest mobile operator, became the first in Europe to launch Starlink’s direct-to-cell satellite technology in a bid to keep millions connected amid wartime blackouts and disrupted infrastructure.
Nigerian Communications Commission (NCC) has blamed the actions of the National Oil and Gas Suppliers Association (NOGASA), for the recent telecom blackout experienced in the Abuja area.
NCC
A statement issued on Friday by the Head, Public Relations, NCC, Mrs. Nnenna Ukoha, while acknowledging the challenges and impact of the degraded Quality of Service (QoS) in the area on subscriber experience, stated: “The challenges are a result of the activities of the National Oil and Gas Suppliers Association (NOGASA), which disrupted diesel supplies to sites with the attendant telecommunications services outages in Abuja.”
She however disclosed that the telecommunications sector regulator is committed to ensuring restoration of seamless communication services to the affected area, and all Nigerians at large, and recognizes the importance of reliable power supply for the provision of optimal telecommunication services.
“The Commission is collaborating with major stakeholders and licensees to address these challenges, largely caused by disruption to diesel supply affecting IHS Nigeria Limited, the colocation provider responsible for powering Airtel and MTN base stations in the affected areas.
“The NCC is actively engaging with relevant stakeholders to address the diesel supply issues and explore sustainable solutions.
“The Commission urges all parties to work together to collaboratively resolve these challenges swiftly by removing the diesel supply bottlenecks affecting critical telecommunications infrastructure, arising from NOGASA’s actions.
Ad image
“In the face of these challenges, we reiterate our commitment to fostering a conducive environment for the growth and sustainability of telecommunications services in Nigeria.
“We are taking proactive steps to facilitate dialogues between the impacted service providers and other stakeholders to promptly resolve the diesel supply concerns that have negatively impacted service quality.”
While assuring that the Commission remains dedicated to effectively managing the situation and will keep the public updated on progress towards restoring full telecommunication services in Abuja, Mrs. Ukoha appreciated subscribers for their patience.
“We thank telecommunications subscribers for their understanding and patience during this period and reaffirm our commitment to delivering high-quality telecommunications services nationwide,” she said.
Mallam Kashifu Inuwa Abdullahi, Director-General of the National Information Technology Development Agency (NITDA), has called for a fundamental shift in Kano State’s economic strategy, urging stakeholders to embrace innovation, technology and collaboration as the drivers of growth in the 21st century.
Mallam Kashifu Inuwa Abdullahi, Director-General of the National Information Technology Development Agency (NITDA)
This is contained in a press statement e-authored by the Director of Corporate Communications & External Relations at NITDA, Hajia Hadiza Umar.
Speaking at the Kano Startup Weekend, Mallam Abdullahi acknowledged Kano’s long-standing reputation as the commercial nerve centre of Northern Nigeria and the wider Sahelian region, noting that its history of trade, enterprise and human capital provided a solid foundation for future growth.
Abdullahi emphasised that while these strengths powered Kano’s success for centuries, the modern economy now offered even greater opportunities through innovation and technology.
He described innovation as the process of transforming ideas into impactful solutions through commercialization, stressing that when ideas were effectively deployed, they created value, solved societal challenges and generated sustainable economic growth.
He noted that Kano’s large market, strategic location and vibrant entrepreneurial culture placed it in a strong position to take advantage of innovation-driven opportunities.
According to him, “Innovation is the process of taking an idea from inception to impact. Invention on its own is a cost centre, but when you commercialise an idea, when you turn it into a product or service that solves a real problem and creates value, that is when you begin to drive economic growth and inclusion.”
He noted that the state hosted numerous degree-awarding institutions across federal, state and private ownership, providing a strong base for human capital development.
However, the NITDA DG expressed concern that these institutions often operated in isolation from industry, with research outputs rarely translating into commercial or industrial applications.
He explained that innovation did not happen in silos and stressed the need for a strong, interconnected ecosystem that brought together academia, industry, startups, entrepreneurs and government.
According to him, universities should conduct research informed by industry needs, industries should leverage research to improve productivity and competitiveness, and startups should serve as the bridge that converted ideas into market-ready solutions.
The NITDA boss further encouraged entrepreneurs to leverage technology to build businesses that could grow beyond local markets, explaining that innovation-driven enterprises had the power to scale rapidly, create jobs and position Kano competitively at both national and global levels.
According to him, digital platforms and emerging technologies now made it easier for startups to reach wider markets and develop solutions that were previously unimaginable.
“You can start your business here in Kano, but your thinking must be global from day one. Technology has removed barriers. With the right skills and platforms, a startup in Kano can build solutions that serve not just Nigeria, but the world,” he noted.
Highlighting NITDA’s ongoing interventions, its Director-General outlined the Agency’s commitment to building national innovation capacity through targeted human capital development programmes.
He cited the Digital Literacy for All (DL4ALL) initiative, which aimed to equip Nigerians across all segments of society with essential digital skills, and the 3 Million Technical Talents (3MTT) programme, designed to produce a pipeline of globally competitive technical professionals in areas such as software development, data analysis and emerging technologies.
He said, “Through DL4ALL, we are ensuring that Nigerians at all levels have the basic digital skills needed to participate in the digital economy, while 3MTT is deliberately building a pipeline of globally competitive technical talents who can drive innovation, create jobs and attract investment.”
Abdullahi explained that these programmes were key pillars of President Bola Ahmed Tinubu’s Renewed Hope Agenda, which prioritised skills development, innovation, job creation and inclusive economic growth as pathways to national prosperity.
According to him, empowering Nigerians with digital and technical skills was essential for building a resilient economy capable of competing in the global digital landscape.
“President Tinubu’s Renewed Hope Agenda is about investing in people, empowering them with relevant skills and creating opportunities for inclusive growth.
“At NITDA, we are using digital skills and innovation as tools to translate that vision into real economic impact for Nigerians,” he said.
The NITDA boss urged all stakeholders in Kano to work together to build a functional innovation ecosystem that could unlock the state’s vast potential and expressed confidence that with the right mindset, strong collaboration and sustained investment in digital skills and innovation, Kano could reclaim its historic leadership role and emerge as a major innovation and entrepreneurship hub in Nigeria and beyond.
REA, NBS Partner to Deliver Comprehensive Energy Data for Nigeria
Check Point Reveals Nigeria as Second Most Targeted African Country for Cyberattacks in November
Airtel Africa Partners Starlink to Launch Direct-to-cell Service in 14 Markets
CBN Revokes Licenses of Two Mortgage Banks, NDIC Begins Liquidation
JustMarkets Launches Global Boost Contest With Gold Prizes for Traders
Nigeria Records Highest Weekly Cyberattacks in Africa — Report
Hackers Breach Phones of Dangote and Otedola, Demand Ransom
Cyber Tsunami Hits Nigeria as Breaches Surge 1,047%, esentry Q3 Report Reveals
FG Lists Bank Charges Nigerians Will Stop Paying from January 2026
MTN Nigeria Has Invested Over ₦32.23 Billion in National Priorities Through Its Foundation
E-Financial3 days agoSupreme Court Clears Fidelity Bank in ₦225bn Sagecom Saga
E-Financial3 days agoPreventing Financial Crimes Amid Mounting Insecurity: Why Following the Money is Now a Survival Imperative
E-Financial3 days agoUnion Bank Clinches Top Workplace Practice Honour at Sustainability Awards
Broadcasting2 days agoDavido, Babajide Sanwo-Olu, Karl Toriola, Others To Be Honoured At The Most Influential People of African Descent Awards In Lagos
News2 days agoSiBAN New Executive Council to Champion Vision for Nigeria’s Digital Economy
E-Financial2 days agoTax Reform or Financial Exclusion? The Trouble with Mandatory TINs
General News2 days agoNITDA DG Calls for Innovation-Led Economic Rebirth @ Kano Startup Weekend
Telecom2 days agoNCC Blames NOGASA for Abuja Outage