Expect Phishers to Up Their Game in 2016
Summary: Google began beta-testing a password-free Gmail login that sends a push notification to a user's phone, which opens an app where the user approves the sign-in, following Yahoo!'s October 2015 "on-demand passwords" service that texts a random four-character code. Yahoo! users must disable two-step verification for on-demand passwords to work, and some non-Yahoo apps like Apple Mail and Outlook require app-specific passwords instead.
Why it matters: Commenters on the piece warn that a simple yes/no approval prompt trains users to tap "yes" reflexively, and one notes an attacker who enters random Gmail addresses could count on roughly a 10 percent rate of people accepting a login they did not initiate.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026