MFA
Victims receive fake MFA verification emails claiming login attempts or device changes. The message urges them to verify access or approve a request, leading to phishing sites that capture credentials or MFA codes.
Mapped to
MITRE ATT&CK®