31–40 of 69 posts
Earlier quoted context omitted.
Good, but the attacker spammed 2FA requests at an employee until they convinced them to accept one. Other than FIDO I think, most forms of 2FA are vulnerable to this.
I'm not sure what you mean, unless they have access to my 2FA app how can they get access to my codes?
Sitting here pleased I continually refused to open an Uber account or have anything to do with them.
The vibe I get is this is an internal compromise. Disgruntled employee, maybe looking for evidence of upcoming layoffs, doesn't find them, now makes it look like "a hacker".
Do we know if the details were stored in a format I need to worry about? If their protocols are in place surely a breach is just high level PII
What harm can be done to me, as an uber user that has their cc data in the uber system by this? Is my credit card information compromised in a way that allows attackers stealing my money?
Yes, we are running a wargame at work trying to replicate this scenario in our setup.