Microsoft: MFA bypass attacks are so rare we don't have good statistics on them
Attacks on Microsoft user accounts that are capable of bypassing multi-factor authentication (MFA) protections are so rare that the Redmond-based company doesn't even have stats for them.
"Compared to password attacks, attacks which target non-password authenticators are extremely rare," said Alex Weinert, Group Program Manager for Identity Security and Protection at Microsoft.
"When we evaluate all the tokens issued with MFA claims, we see that less than 10% of users use MFA per month in our enterprise accounts (and that includes on premises and third party MFA)," Weinert added. The Microsoft security expert claims that this slow rate of adoption among Microsoft users is what's kept attackers from evolving and deploying tools that can intercept MFA operations.
