World Bank network intrusion INVOLVES multi-factor authentication
The bank had abandoned a multi-factor access program before the intrusion.
Explicit Confidence 99% · Jack Rhysider EP 91 Details
“they had abandoned a multi-factor access program”
Technique
technique:multi_factor_authentication
Also: MFA, dual-factor authentication, two-factor authentication
Authentication requiring more than a password, including token or SMS-based verification in the examples discussed.
Authentication requiring more than a password, including token or SMS-based verification in the examples discussed.
“They did not have multi-factor authentication set up on e-mail.”
Authentication requiring more than a user ID and password; the bank had abandoned one access program during a transition.
“they had abandoned a multi-factor access program”
Identity verification using an additional factor, such as a code sent to an email address.
“They usually use MFA, multi-factor authentication.”
Authentication control proposed for internet-facing portals and computers but not implemented by the hospital because of budget and usability concerns.
“they suggested adding multi-factor authentication or MFA”
“if MFA would have been implemented, then at least that initial access”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | World Bank network intrusion | Explicit | 91 |
World Bank network intrusion INVOLVES multi-factor authentication
The bank had abandoned a multi-factor access program before the intrusion.
Explicit Confidence 99% · Jack Rhysider EP 91 Details
“they had abandoned a multi-factor access program”