0
0
Threat actors downgrade FIDO2 MFA auth in PoisonSeed phishing attack - BleepingComputer
7/19/25 at 5:41pm
Organization
BleepingComputer
Author
Lawrence Abrams
43 words
0
Comments
A PoisonSeed phishing campaign is bypassing FIDO2 security key protections by abusing the cross-device sign-in feature in WebAuthn to trick users into approving login authentication requests from fake company portals.
You are the first to view
https://www.bleepingcomputer.com/news/security/threat-actors-downgrade-fido2-mfa-auth-in-poisonseed-phishing-attack/
Create an account or login to join the discussion