3 ms·
The 2FA token is valid for up to 1 minute and the attacker could easily ask for it as well... There were no image downloads, it was embedded within the message
by chinathrow 10y ago
The 2FA token is valid for up to 1 minute and the attacker could easily ask for it as well...
There were no image downloads, it was embedded within the message itself.
- Dangeranger 10y agoOk that's valid. Other than blocking bit.ly and other commercial link sharing services this seems to be a human hacking problem. It's hard to get people to be careful about checking the URL on a login page.