3 ms·
I don't understand how 2FA would stop this attack. The attack described involves phishing for a one time code like what most 2FA methods give.
by tgb 5y ago
I don't understand how 2FA would stop this attack. The attack described involves phishing for a one time code like what most 2FA methods give.
- Tenoke 5y agoThe actual transaction then has another 2fa, seperate from the logging in. In one of my banks this is approving the sum of the transfer in an app after logging in with a password(you can't transfer the app to another device easily), in another it's approving by using an authenticator-like app + a seperate pin, in a bank before that it included a whole seperate device for me to put my debit card in. In neither case would simply logging in or getting my account password be enough.
- tgb 5y agoInteresting. The attack seems to be primarily on people who don't already have Zelle so in the analogous case in Europe wouldn't the attacker just be able to setup the app as the victim and authorize the transfer themselves?
- Tenoke 5y agoYou can't just install the app on another device with the login details, you need to talk to the bank and go through a whole process when changing a device (in one of my banks it can only be done in person even).