MFA fatigue attack

Concept

An attack, also called prompt or push bombing, in which an attacker who already has a password floods the user with MFA approval prompts until the user approves one.

Title graphic: MFA fatigue attack (Concept)

Type	Concept

Articles about MFA fatigue attack (1)

MFA Fatigue Attack Explained: How Repeated Prompts Put Microsoft 365 and Azure Security at Risk
2026-04-26 · Mirko Peters
In today’s Microsoft-centric workplaces, multi-factor authentication (MFA) is supposed to be your front door lock—making sure cybercriminals can’t…

Glossary

Community wiki

Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.

Experts and companies for this topic

Nobody has listed this topic yet. Add it to your profile.

Sources

Feed for this topic (RSS): entity/mfa-fatigue/feed.xml
Articles on this topic: 1

Maintained by Mirko Peters (Microsoft MVP) · Last updated: 2026-11-03