Authentication Strategies to Protect Your Customers and Your Brand from Sophisticated Attacks
summary
Claims that SMS OTP is still the dominant MFA with 35% of businesses use SMS OTP and that massive data exposure — 25 billion records exposed Aug 17 2024 — fuels credential stuffing and SIM swaps. Attack chain: reconnaissance via leaked PII, IVR and contact‑center scoping, SIM reassignment or eSIM takeover exploiting SS7 weaknesses, then account recovery abuse. Defenses shown: phone intelligence and network forensics to detect repeated SIM reassigns, biometric second factors instead of KBA/OTP, remove human touch in recovery flows, and freeze credit as an immediate mitigation.
AI-written summary · about
chapters (12)
- 0:00Introduction to authentication realities
- 1:08Speaker introduction and background
- 3:01Sarah’s nightmare and breach statistics
- 6:19Risks of one-time passcodes
- 7:03Social engineering threats
- 10:45SIM swap attacks explained
- 13:59How fraudsters target victims
- 15:04Man-in-the-middle attacks
- 16:33Network forensics and phone intelligence
- 19:09Protecting against authentication fraud
- 22:03Educating employees and consumers
- 24:10Q&A and consumer awareness tips
related talks
48m2FA2Furious: New Threats to MFA
25mAuthentication Beyond SMS
01h 02mWhy using SMS in the authentication chain is risky
24m2FA in 2020 and Beyond
50mOne Does Not Simply Add MFA
40mPurple Team Auth: Hacking & Bypassing MFA Systems, and How to Armor Up
42mThe Old is New Again: An Intro to SMS Security and Why It’s Vital
24mTwo Factor Failure