Mobile MFA Madness: Mobile Device Hygiene and MFA Integrity Challenges
summary
Demonstrates weaknesses in mobile authenticator apps by showing how poor mobile device hygiene can allow compromise of MFA tokens; includes a live demo of techniques to attack authenticator apps on mobile operating systems. Covers mobile OS basics and MFA mechanisms as the foundation for the attacks, focusing on practical exploitation rather than theory.
AI-written summary · about
chapters (9)
- 0:00Introduction to mobile MFA
- 1:21History and risks of MFA
- 4:37Mobile application vulnerabilities
- 6:00Kernel-level exploits
- 11:01Exploitation and patching
- 15:59Live demonstration
- 25:34Enterprise impact and statistics
- 29:04Security discipline and recommendations
- 34:54Question and answer session
related talks
45mMFA: Stories that make you go 'Huh?'
40mPurple Team Auth: Hacking & Bypassing MFA Systems, and How to Armor Up
26mMake MFA More Resilient
50mOne Does Not Simply Add MFA
38mAnatomy of the Attack: The Rise and Fall of MFA
47mBreaking the Next Factor – Live Multi-Factor Authentication (MFA) Hacking
42mBreaking the Next Factor - Evil will pwn you LIVE tonight
26mMFA for All