--- title: Protect your Business from MFA Fatigue Attacks description: Microsoft's shift to number matching authentication comes as a direct response to the rise of MFA fatigue attacks, also known as MFA spamming or bombing. --- [Skip to content](https://blog.yournucleus.ca/mfa-fatigue-attacks#main-content) [![Nuc-logo-sketched-1 (1)](https://blog.yournucleus.ca/hs-fs/hubfs/nucleus-images/Nuc-logo-sketched-1%20(1).png?width=220&height=44&name=Nuc-logo-sketched-1%20(1).png "Nuc-logo-sketched-1 (1)")](https://yournucleus.ca) - About Show submenu for About ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [About Nucleus](https://yournucleus.ca/about/) - [Careers](https://yournucleus.ca/careers/) - [History](https://yournucleus.ca/about/history/) - [Team](https://yournucleus.ca/about/team/) - Services Show submenu for Services ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [Managed IT Support](https://yournucleus.ca/services/managed-it-support/) - [Cybersecurity Services](https://yournucleus.ca/services/cybersecurity-services/) - [Managed AI Solutions](https://yournucleus.ca/services/managed-ai-solutions/) - [IT Consulting](https://yournucleus.ca/services/it-consulting/) - [Microsoft 365](https://yournucleus.ca/services/microsoft-365/) - [vCIO](https://yournucleus.ca/services/vcio/) - [ALL](https://yournucleus.ca/services/) - Results Show submenu for Results ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [Architecture](https://yournucleus.ca/results/architecture-engineering-construction/) - [Legal](https://yournucleus.ca/results/legal/) - [Mining](https://yournucleus.ca/results/mining/) - [All](https://yournucleus.ca/results/) - [Blog](https://blog.yournucleus.ca) - About Show submenu for About ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [About Nucleus](https://yournucleus.ca/about/) - [Careers](https://yournucleus.ca/careers/) - [History](https://yournucleus.ca/about/history/) - [Team](https://yournucleus.ca/about/team/) - Services Show submenu for Services ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [Managed IT Support](https://yournucleus.ca/services/managed-it-support/) - [Cybersecurity Services](https://yournucleus.ca/services/cybersecurity-services/) - [Managed AI Solutions](https://yournucleus.ca/services/managed-ai-solutions/) - [IT Consulting](https://yournucleus.ca/services/it-consulting/) - [Microsoft 365](https://yournucleus.ca/services/microsoft-365/) - [vCIO](https://yournucleus.ca/services/vcio/) - [ALL](https://yournucleus.ca/services/) - Results Show submenu for Results ![](https://blog.yournucleus.ca/hubfs/nucleus-images/caret.png) - [Architecture](https://yournucleus.ca/results/architecture-engineering-construction/) - [Legal](https://yournucleus.ca/results/legal/) - [Mining](https://yournucleus.ca/results/mining/) - [All](https://yournucleus.ca/results/) - [Blog](https://blog.yournucleus.ca) [Contact](https://yournucleus.ca/contact/) [1-844-301-HELP](tel:1-844-301-4357) # Protect your Business from MFA Fatigue Attacks March 28, 2023   |  [General](https://blog.yournucleus.ca/tag/general) Microsoft is upgrading their security and changing the default Multifactor Authentication (MFA) settings in Authenticator. Starting on May 8, 2023, number matching MFA will be enforced across all users of Microsoft Authenticator. The shift to number matching authentication by Microsoft comes as a direct response to the rise of MFA fatigue attacks, also known as MFA spamming or MFA bombing. Here’s what you need to know to protect yourself, your business and how Managed Security Services can improve your security posture.    What is an MFA Fatigue Attack?    An MFA fatigue attack happens after an adversary has already stolen the user’s credentials by some other means. It involves endlessly bombarding an account owner with MFA push notifications until they slip and approve the login request. Once an MFA request is approved, hackers can access the user's account and misuse it however they want.   > According to Microsoft, about 1% of users will accept an approval request on the first try.  >   What you Need to Know  There are two precautions that should be a rule of thumb;   1) Never approve an MFA request if you are not sure where it is originating from and always deny or decline and;    2) If the MFA request persists, find the service that is sending them and change your password.  MFA additional context rules send you all the details you need to know to determine where and what is pushing the MFA requests:  - Show application name in the push and passwordless notification – Shows which application the user is attempting to sign in.  - Show geographic location in the push and passwordless notification – Displays from where the request is attempted.  - Microsoft Authenticator Number Matching with push notification which requires the user to type in a two-digit code from the login screen to their Authenticator app.  ![Number matching](https://blog.yournucleus.ca/hs-fs/hubfs/number%20matching.jpg?width=541&height=406&name=number%20matching.jpg)Cybersecurity Awareness Training    Provide your employees with annual [cybersecurity training](https://blog.yournucleus.ca/cybersecuritytraining). This will help your users understand the risks associated with cyber threats and give them the training they need to be able to identify MFA spamming, email phishing scams and Business Email Compromise attacks. It will also reinforce the importance of up-to-date password hygiene. Consider putting a program in place to ensure all new employees have access to cybersecurity training, especially those that work in finance.     MFA fatigue attacks are just one the many latest threats that we need to be aware of and address. We want businesses to have the tools, best practices and best standards in place to protect their users and data from bad actors. A Managed Service Provider can help your business understand your risks so that can do the best job you can keeping your business secure. Visit our Managed Security Services [webpage](https://yournucleus.ca/services/cybersecurity-services/) to learn more or contact us to schedule a meeting.       ![Nucleus Pulse Image](https://blog.yournucleus.ca/hubfs/nucleus-images/Group%20399.png) ![Picture of Nucleus Networks](https://blog.yournucleus.ca/hs-fs/hubfs/nucleus-images/nuc_dog.png?width=115&name=nuc_dog.png) [Nucleus Networks](https://blog.yournucleus.ca/author/nucleus-networks) ## We are local! WE HAVE PRESENCE IN VICTORIA, VANCOUVER, PRINCE GEORGE, CALGARY, AND TORONTO. [Victoria](https://yournucleus.ca/victoria/) [Vancouver](https://yournucleus.ca/vancouver/) [Calgary](https://yournucleus.ca/calgary/) [Toronto](https://yournucleus.ca/toronto/) [Prince George](https://yournucleus.ca/prince-george/) ## Ready to take your business to the next level? [Get Started](https://yournucleus.ca/contact/) ![pulse animation](https://blog.yournucleus.ca/hs-fs/hubfs/nucleus-images/pulse-animation.gif?width=806&height=61&name=pulse-animation.gif) ![Nucleus-Networks-Managed-IT-Services-Provider-REV-Logo](https://blog.yournucleus.ca/hubfs/nucleus-images/Nucleus-Networks-Managed-IT-Services-Provider-REV-Logo.png "Nucleus-Networks-Managed-IT-Services-Provider-REV-Logo") ![Apple-and-Microsoft-Office-Ready](https://blog.yournucleus.ca/hubfs/nucleus-images/Apple-and-Microsoft-Office-Ready.png "Apple-and-Microsoft-Office-Ready") **FRIENDLY** [twitter](https://www.twitter.com) [facebook](https://www.facebook.com) [linkedin](https://www.linkedin.com) [instagram](https://www.instagram.com) ### ABOUT - [History](https://yournucleus.ca/about/history/) - [Careers](https://yournucleus.ca/careers/) - [Our Team](https://yournucleus.ca/about/team/) - [Blog](https://blog.yournucleus.ca/) ### SERVICES - [IT Support](https://yournucleus.ca/services/managed-it-support/) - [Cybersecurity](https://yournucleus.ca/services/cybersecurity-services/) - [vCIO Services](https://yournucleus.ca/services/vcio/) - [Cloud Services](https://yournucleus.ca/services/cloud-services/) - [Microsoft 365](https://yournucleus.ca/services/microsoft-365/) - [IT Consulting](https://yournucleus.ca/services/it-consulting/) - [Managed Voice](https://yournucleus.ca/services/managed-voice-services/) ### CONTACT US - 1 844 301 4357 - [sales@yournucleus.ca](mailto:sales@yournucleus.ca) - [help@yournucleus.ca](mailto:help@yournucleus.ca) - careers@yournucleus.ca ### LOCATIONS - VANCOUVER 880 – 505 Burrard St. [+1 604 682 3444](tel:%20+1-604-682-3444) - VICTORIA [+1 844 301 4357](tel:%20+1-844-301-4357) - CALGARY [+1 587 393 1141](tel:%20+1-587-393-1141) - TORONTO [+1 416 628 3718](tel:%20+1-416-628-3718) © 2023 NUCLEUS  |  [TERMS OF USE](https://yournucleus.ca/terms-of-use/)  |  [PRIVACY POLICY](https://yournucleus.ca/privacy-policy/)  |  POWERED BY LOOMO ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Nucleus Networks", "url" : "https://blog.yournucleus.ca/author/nucleus-networks" }, "dateModified" : "2023-03-29T17:05:49.519Z", "datePublished" : "2023-03-28T23:09:07.000Z", "headline" : "Protect your Business from MFA Fatigue Attacks", "mainEntityOfPage" : { "@id" : "https://blog.yournucleus.ca/mfa-fatigue-attacks", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.yournucleus.ca/hubfs/Illustrated%20Logo.png" }, "name" : "Nucleus Networks Inc." } } ```