Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
1) SIM fraud for passwordless SMS logins or MFA bypassing
2) Persistence via similar methods by registered an adversary controlled phone number (as opposed to ghost logins)
1) SIM fraud for passwordless SMS logins or MFA bypassing 2) Persistence via similar methods by registered an adversary controlled phone number (as opposed to ghost logins)