Technique
technique:two_factor_authentication
Also: 2FA, two factor authentication, two-factor authentication, two-factor indication code
Authentication control enabled for VPN users to require both a password and a token code.
Authentication control enabled for VPN users to require both a password and a token code.
“They enabled two factor authentication for VPN users.”
Authentication control recommended by the host for protecting email access.
“then enable two-factor authentication on it”
Additional authentication requiring a time-sensitive token code, discussed as a control that might have prevented access to a neglected server.
“it wasn’t set up for two-factor authentication”
Additional authentication control recommended for and later discussed in relation to high-profile Twitter accounts.
“turn two-factor authentication on”
“those Twitter accounts need to be protected standard with two-factor authentication”
Additional authentication protection used by Miles on his social-media accounts.
“He was using two-factor authentication on all his social media accounts.”
Additional account authentication described as absent from the targeted accounts and recommended as a security control.
“don’t enable two-factor authentication on their accounts”
Additional authentication step whose codes were captured and later obstructed the attempted transfer.
“we would have a log file of all these name, passwords, and two-factors”
“it then asked for your two-factor indication code again”
Account authentication mechanism discussed as vulnerable when codes are delivered by SMS after a SIM swap.
“I would be ready then to reset the password and input the 2FA code.”
“use two-factor authentication that isn’t SMS text messages”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | Las Vegas Sands cyber-attack | Explicit | 37 |
| incoming | INVOLVES | JPMorgan Chase breach | Explicit | 76 |
| incoming | USES | Explicit | 87 | |
| incoming | USES | Miles | Explicit | 97 |
Las Vegas Sands cyber-attack INVOLVES two-factor authentication
The Sands security team enabled two-factor authentication for VPN users to prevent the password attack from succeeding.
Explicit Confidence 99% · Jack Rhysider EP 37 Details
“They enabled two factor authentication for VPN users”
JPMorgan Chase breach INVOLVES two-factor authentication
The neglected employee-benefits server lacked two-factor authentication, which Jack says probably would have stopped the attackers from progressing.
Explicit Confidence 98% · Jack Rhysider EP 76 Details
“This is a perfect example of when two-factor authentication probably would have stopped these hackers from getting any further into the network.”
Twitter USES two-factor authentication
Twitter encouraged, but did not require, two-factor authentication for election-related accounts before the 2020 election.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“They encouraged but didn’t actually require two-factor authentication”
Miles USES two-factor authentication
Miles used two-factor authentication on all of his social-media accounts after the attacks.
Explicit Confidence 99% · Jack Rhysider EP 97 Details
“He was using two-factor authentication on all his social media accounts”