attack.t1621 | Detection.FYI

Multifactor Authentication Denied

Apr 28, 2026 · attack.privilege-escalation attack.persistence attack.initial-access attack.credential-access attack.stealth attack.t1078.004 attack.t1110 attack.t1621 ·
Share on:

User has indicated they haven't instigated the MFA prompt and could indicate an attacker has the password for the account.

Read More
Multifactor Authentication Interrupted

Apr 28, 2026 · attack.privilege-escalation attack.persistence attack.initial-access attack.credential-access attack.stealth attack.t1078.004 attack.t1110 attack.t1621 ·
Share on:

Identifies user login with multifactor authentication failures, which might be an indication an attacker has the password for the account but can't pass the MFA challenge.

Read More