The threat of deepfakes to remote identity verification systems

Intrusions part of the campaign, which has been primarily targeted at the education sector, commenced with the distribution of notification-spoofing phishing emails deceiving recipients into clicking a link that redirects to a seemingly legitimate ADFS portal seeking to compromise targets' second-factor authentication, according to an analysis from Abnormal Security.

Intrusions leveraging the Axios HTTP client have successfully breached 43% of high-profile user accounts in the transportation, finance, IT, healthcare, and construction sectors from June to November, according to a Proofpoint analysis.

The flaw enabled authentication bypass by spoofing, with a proof-of-concept exploit available.