OTP Bot Attacks
summary
Covers crimeware-as-a-service focusing on SMS-based one-time password (OTP) bots that automate social-engineering flows to harvest MFA/OTP codes for targets like banks, fintechs and retailers. Describes the different bypass methods these bots use and ongoing problems they create for fintech security.
AI-written summary · about
chapters (5)
- 0:00Start
- 2:32How Does an Otp Bot Essentially Work
- 6:42Otp Bots
- 29:32What Issues Do Otp Bots Pose to Financial Institutions
- 32:01Proactive Threat Landscape Monitoring
related talks
48m2FA2Furious: New Threats to MFA
30mAuthentication Strategies to Protect Your Customers and Your Brand from Sophisticated Attacks
40mPurple Team Auth: Hacking & Bypassing MFA Systems, and How to Armor Up
45m[T]OTPs Are Not As Secure As You Might Believe
39m2FA, WTF?
33mSMS PVA Services Fueled by Compromised Supply-Chain Mobile Botnets
24m2FA in 2020 and Beyond
24mTwo Factor Failure