Microsoft Authenticator

Lapsus$ proved push bombing in 2022

MFA fatigue attacks against Microsoft Authenticator: T1621 mechanics, number matching, AiTM proxy gaps, token theft, and the Entra ID telemetry that catches it.