Telecom
What You Need to Know About Multifactor Authentication Fatigue Attacks and How they can be Prevented
Multifactor authentication is a security measure that requires users to provide a second form of verification before they can log into a corporate network. It has long been considered essential for keeping fraudsters out. However, cybercriminals have been discovering increasingly clever ways to bypass it.
During an attack on Uber’s IT systems in 2022, the hackers did not use any sophisticated tactics to gain access. Instead, they bombarded an employee with repeated login requests until, out of sheer frustration, the employee approved one.
This type of cyberattack is known as an “MFA fatigue attack” and poses a real risk to organisations, says Anna Collard, SVP Content Strategy and Evangelist at KnowBe4 AFRICA, a cybersecurity training designer.
“MFA fatigue attacks, also known as prompt spamming or authentication bombing, exploit human vulnerability, rather than relying on high-tech hacking methods,” she explains. “These attacks involve sending continuous push notifications to a target who has already provided their username and password, aiming to irritate or confuse them into unwittingly granting the attacker access to their account or system.”
With Uber, the attacker likely bought the contractor’s Uber corporate username and password on the dark web. The attacker then made repeated attempts to log into the victim’s Uber account. Each time, the victim received a request to approve a two-factor login, which blocked access at first. However, eventually, and after the attacker contacted the contractor on WhatsApp claiming they were from Uber IT and that the only way to get rid of the never ending notifications was to accept one, the contractor accepted one request, allowing the attacker to successfully log in.
Previously, cybersecurity experts believed that Multifactor Authentication (MFA) was a foolproof method to protect corporate IT systems from hackers. “Now we’re seeing attackers finding ways around it by bombarding the victim with scores of MFA requests or by tricking them over the phone,” says Collard. This tactic, similar to a swarm of bees overwhelming someone, is a simple yet effective social engineering technique used by hackers. “By bugging you repeatedly until you give in, malicious actors can manipulate users into approving fraudulent access attempts,” says Collard.
How can you prevent it?
The best way to prevent MFA fatigue attacks in organisations is not to use push notifications. “While MFA provides an extra layer of security, it’s not foolproof,” she asserts. “From a cybersecurity perspective, I would recommend that organisations disable push notifications altogether and rather use alternative verification methods.”
An example of a better verification method is number matching. “This involves matching a unique code provided by the authentication app with the code displayed on the screen during the login process,” explains Collard.
A challenge-response method is another effective way of providing additional security. This method asks a user a specific question to verify their identity or to perform a task in response to a challenge. “A challenge-response method is more difficult for hackers to bypass. It can involve mechanisms like biometric authentication, in which users must scan their fingerprints or irises or use facial recognition to gain access to a network.” However, both of the above are not immune against so-called man in the middle or social engineering attacks tricking the users to hand over their OTP or response to the fraudster.
Another effective verification method is FIDO2, an open authentication standard that allows users to log in without using passwords. “You can implement FIDO2 using hardware security keys,” she explains. Typically, USB sticks store the user’s private key, while the public key is stored on the authentication server. As soon as the user enters their username and password, the system requests them to use the hardware key. “It is more resistant to phishing as it works on a challenge-response protocol and doesn’t rely on a one-time PIN that can be intercepted,” she adds.
Mindfulness is key
As with all hacking attempts, it’s crucial that users remain calm and mindful, rather than reacting emotionally. “Stay tuned into your body’s responses when dealing with potential cybersecurity threats, whether they are phishing emails or MFA fatigue attacks,” says Collard. “If something feels strange, like if the situation is putting you under undue pressure, listen to that cue and don’t respond in a knee-jerk fashion. In this way, you’ll keep a straight head and thwart potential data breaches.”
Telecoms giant, MTN Nigeria, has announced the disbursement of over ₦290 million to more than 1,500 winners in its ongoing Mega Billion Promo.
L-R: Deji Roberts, Assistant Director, Nigerian Communications Commission, Lagos Zonal Office; Ugonwa Nwoye, Chief Customer Relations and Experience Officer, MTN Nigeria; Femi Yusuf, 10 Million MTN Mega Billion Promo Jackpot Winner; Efe Kwado, MTN Mega Billion Promo Winner; Onyinye Ikenna-Emeka, Chief Marketing Officer, MTN Nigeria and Samuel Rowland, Chief Operations Officer, Lagos State Lotteries and Gaming Authority at the MTN Mega Billion Promo Media Parley held on Saturday, July 19, 2025 at the MTN Rooftop Events Centre Plaza, Ikoyi.
The update was shared during a live event held on July 19 at the company’s Rooftop Events Centre in Lagos. Representatives from the Nigerian Communications Commission (NCC), the Lagos State Lotteries and Gaming Authority, MTN executives, journalists and selected promo winners were in attendance.
Speaking at the event, Onyinye Ikenna-Emeka, MTN’s Chief Marketing Officer, stated that the initiative was launched to support loyal customers during difficult times. “In the last couple of years, it’s been a tough time for the average Nigerian. This promo is one of our ways of making life better for our customers,” she said.
Ikenna-Emeka revealed that the promo has produced over 1,500 winners, including three jackpot winners, 20 winners of ₦5 million each, and more than 100 winners of ₦100,000. She added that the company remains committed to rewarding customers transparently.
One of the jackpot winners, Femi Yusuf, who won ₦10 million, shared his excitement. “I thought it was one of those promos where nothing comes out of it. My wife was the one who spotted my number during the live draw,” he said. When asked about the delivery of his prize, he replied, “Fast and fast. MTN, no scam.”
The event also featured live calls to new winners, including a woman identified as Motunrayo, who won ₦2 million. She expressed joy over the unexpected win, saying, “I’m so grateful. Thanks so much.”
Debo Agun, Senior Manager, Consumer Segment (Mass Market), explained the mechanics of the promo. He said participation is free and open to MTN subscribers who dial *900# to opt in. Airtime purchases serve as entries—₦100 worth of airtime equals one entry, and customers can win multiple times.
Agun stated that 63 winners are selected daily from Monday to Friday, while Saturdays feature 104 winners, including a ₦10 million jackpot. Other prizes range from ₦25,000 to ₦2 million and are paid into customers’ MoMo wallets. Those without wallets can create one by dialing *671#.
Promo draws are conducted and streamed live on MTN’s Instagram, YouTube, and Facebook channels. Independent partners oversee the process to maintain credibility and fairness.
The promo began on June 23 and runs for 90 days.
MENXTT Technology NG has introduced a fresh lineup of USA-specification smartphones alongside its existing range of laptops, accessories, and software tools in a major move to redefine tech quality and customer satisfaction in Nigeria.
The firm, which operates as a fully online IT service provider, is focused on bridging the gap between businesses and customers by offering seamless tech procurement, deployment, and after-sales support.
According to Anthony Emeka Nwosu, Director of Communication and Customer Retention, the company is committed to restoring consumer trust in tech purchases through guaranteed quality, extended warranties, and structured support.
Nwosu stated that the decision to supply USA-grade devices was borne out of frustration with substandard options in the market and zero accountability.
He said MENXTT was built to be responsive, dependable, and quality-driven, assuring customers that they would not be left alone after purchase.
With services covering laptops, accessories, website development, software deployment, and IT support, MENXTT promises to take technology directly to the client with less stress.
The company, located at 8a Oje Imeviani Street, Julie Estate, Oregun, Ikeja, Lagos, is also noted for its tech-enabled structure that allows users to access solutions from anywhere in Nigeria through its online platform.
Customers can reach MENXTT Technology NG via email: info@menxtt.com.ng or website: menxtt.ng.
Telecoms giant MTN Group has partnered with MTV Base to launch the Room of Safety campaign, a youth-led movement aimed at raising awareness on internet safety and digital wellbeing for children and young people across Africa.
The initiative, a major part of MTN’s Help Children Be Children campaign, seeks to address growing concerns around cyberbullying, grooming, misinformation, and other forms of online harm. Through this collaboration, MTN will leverage MTV Base’s extensive reach across youth audiences to drive impactful change.
Central to the campaign is the premiere of a 10-part short-form docu-series titled Room of Safety, which kicks off on July 20, 2025, at 16:00 on MTV Base (DStv channel 322). Episodes will also stream on MTV Base South’s digital platforms including Instagram, YouTube, and TikTok.
Each episode will feature real-life stories, expert interviews, and practical resources to help young viewers identify digital threats and take proactive steps. The series also encourages youth to speak up about negative experiences online and shows them how to report abuse.
A statement from MTN Group emphasized the importance of equipping young Africans with the knowledge and confidence to navigate digital spaces safely, adding that the campaign aims to normalize conversations around digital ethics and mental health within families, schools and peer groups.
The launch is backed by social media engagement and outreach activities targeted at schools, creators, and community organizations across multiple African countries.
Microsoft Server Hack Likely Solo Actor, Thousands at Risk
CSCS Inaugurates Custodian Portal to Enhance Digital Access, Operational Efficiency
Reps Investigate 25 Insurance Firms for Financial Infractions
Flaw in Microsoft SharePoint Sparks Global Cybersecurity Concern
Naira Slides Again, Hits ₦1,532.34/$ Despite CBN’s Dollar Push
General News2 days agoPrateek Suri CEO Maser Meets Zambia’s Education Minister to Propel Student Housing and Education Projects
News1 day agoUN Appoints Sa’id, Nigerian to Nuclear Panel
E-Financial1 day agoUBA’s LEO Becomes Africa’s First Chatbot to Enable Cross-Border Payments
E-Business1 day agoNIMC Enrolls 122m for NIN, Cuts Extortion by 40 Percent
Telecom1 day agoMTN Urges Nigerian to Regards Telecom Infrastructure as National Assets
General News1 day agoAppeal Court Nullifies Registration of ‘KPMG Professional Services’
E-Financial1 day agoPolaris Bank Equips 500+ Journalists with Digital Tools for Modern Storytelling
E-Financial1 day agoSEC to Introduce USSD Codes to Fight Ponzi Schemes