Multi-factor authentication (MFA) is supposed to defend against phishing attacks, but threat actors operating under the ShinyHunters banner are using it as a pretext in ongoing social engineering attacks aimed at bypassing it. Among those successfully targeted in these latest hacking spree are Panera Bread, SoundCloud, Match Group (owner of online dating services Tinder, Hinge, Match and OkCupid) and Crunchbase. There will likely be many more victims, as Silent Push researchers detected active targeting or … More → The post ShinyHunters flip the script on MFA in new data theft attacks appeared first on Help Net Security .