Think, Talk, Hack

Malicious Apps from Google PlayStore Bypassing SMS-Based Two-Factor Authentication and Steal OTPs in SMS

Researchers discovered new malicious Android apps from Google Play Store bypassing SMS-based two-factor authentication (2FA) mechanisms and steal the OTP without SMS’s permission. Google recently restrict other apps to use of high risk or sensitive permissions, including the SMS or Call Log in March 2019 that leads malware and credentials stealing apps lost its permissions. Newly uncovered malicious apps […]

root

Modlishka – The Tool That Can Bypass Two-Factor Authentication Via Phishing

While most users consider two-factor authentication a security measure to protect accounts, a researcher has proved otherwise. The researcher has simply deployed the tool online for easy access. As reported, he has developed a penetration testing tool named “Modlishka”. This Modlishka tool can bypass two-factor authentication and automate phishing attacks. 2FA Bypass Using Modlishka Tool […]

root

A new tool that allows you to bypass two-factor authentication

This authentication method might not be as secure as we thought Piotr Duszynski, a researcher specialist on network security born in Poland, recently announced the launching of a tool called “Modlishka” (Mantis in Polish), which, according to the expert, is a penetration testing tool that allows users to deploy phishing campaigns automatically, for example. He […]

root

Two-Factor Authentication Controversy Facing Facebook, User Mobile Numbers Used for Ads

Two-factor authentication has been a near silver-bullet that prevents phishing attacks and online account thefts. It is very effective, as it provides the user a virtual “second password”, which disables the capability of account login procedure if not provided. It was very instrumental to security, that Google has no recorded incident of a phishing attack, […]

root

Facebook Makes Two-Factor Authentication Easier to Set Up

In a bid to make things easier for users while signing in, Facebook has endeavored to make two-factor authentication easier to set up. The two-factor authentication is always looked upon as a key factor as regards cybersecurity, but it could make signing in a pain for users, to a small extent at least. Now, Facebook […]

root

Researcher shows how hackers can bypass Two-factor authentication

A majority of users and companies are moving to Two-factor authentication (2FA) for enhancing the security of its data and systems. But contrary to popular belief, it cannot provide a fool-proof layer of security to online accounts since Kevin Mitnick at KnowBe4 has demonstrated that it is very easy to deceive this defensive measure. KnowBe4 […]

root

Hackers can Bypass Two-Factor Authentication with Phishing Attack

Two-factor authentication is an additional layer of security on top of the username and password. It makes harder for attackers to gain access to personal devices or accounts. KnowBe4 Cheif Hacking officer Kevin Mitnick demonstrates the phishing attack with the fake email pretends to be from Linkedin, but the email actually comes from the typosquatted […]

root

ReelPhish – A tool for Social Engineering and Two-Factor Authentication

Social engineering campaigns are a threat to everyone; according to cyber securityexperts from the International Institute of Cyber Security, an attack can capture the username and password of a victim and store it for an attacker to use again later. Two-Factor Authentication (2FA) or Multi-Factor Authentication (MFA) is seen as a solution to the threats. Both […]

root

ReelPhish – A Real-Time Advanced Two-Factor Authentication Phishing Tool

Security Firm FireEye Released a new Phishing tool called ReelPhish to simplifies the real-time Phishing attack that is designed to be run on the attacker’s system and control it by navigating the Attacker web browser. A phishing attack is one of the dangerous social engineering attacks that leads to capture a victim’s username and password that will […]

root

Hackers Find Clever Way to Bypass Google’s Two-Factor Authentication

Attackers take social engineering to a totally new level. There’s a sneaky new trick going around that can fool some people into divulging their two-factor authentication code to crooks, while thinking they’re actually protecting their accounts. Two-factor authentication, or 2FA, is a second layer of authentication that many online services support, from banks to Google, from […]

root

KickassTorrents Becomes First Torrent Site to Introduce Two-Factor Authentication

KickassTorrents add Two-Factor Authentication feature, vows to protect users’ account and privacy  The Pirate Bay may be the most popular torrent site but KickassTorrents is putting money on security. That’s why it has become the first ever torrent website to put two-factor authentication for its visitors — The new feature is known as “multi-factor authentication” […]

root

Australian Government Portal Asks Users To Get Rid of Two-Factor Authentication

MyGov, a portal used for managing various Australian government services is asking users to turn off their two-factor verification while traveling abroad. Portal’s administrator has been advising this move to the users on twitter. When on a trip outside Australia, users are required to change their SIM to a locally accepted SIM card and during this time if they want […]

root

How To Enable Two-factor Authentication For Google, Facebook?

Short Bytes: Two-factor authentication is amongst many options, yet one of the most underestimated methods, to improve your online security. If you haven’t enabled the 2-step verification for your password protection yet, then it is time you go for it. When Google itself recommends methods to stay safe online, then it is time you understand the gravity […]

root

How Gmail ID Can Be Hacked Despite Having Google’s Two-Factor Authentication On

The Two-factor authentication is believed to prevent Gmail accounts from getting hacked. But what happened with indie developer Grant Blakeman shows how two-factor authentication can be beaten to takeover a Gmail account. Writing on the newly emerging social media site Ello, Blackman revealed how hackers hacked his Instagram account through his Gmail account. Despite the fact he was using two-factor authentication, the hackers were […]

root