Archie Norman

Scattered Spider talks help desks into moving MFA onto attacker-controlled devices

A joint CISA and FBI advisory says the group rehearses a company's password-reset process over several calls before it asks for anything. That puts factor-reset workflows in the identity boundary, not the support queue.