New PoisonSeed Attack Let Attackers Trick Users into Scanning a QR Code with an MFA Authenticator

A sophisticated new attack technique compromises Fast IDentity Online (FIDO) key authentication by exploiting cross-device sign-in features.  The PoisonSeed attack group has developed a method to downgrade FIDO key protections through adversary-in-the-middle (AitM) phishing campaigns that trick users into scanning malicious QR codes with their MFA authenticators.  This development represents a significant escalation in identity-based […]

The post New PoisonSeed Attack Let Attackers Trick Users into Scanning a QR Code with an MFA Authenticator appeared first on Cyber Security News.