Cybersecurity expert Kevin Surace explains how AI-generated phishing emails and deepfakes trick users into revealing two-factor authentication codes. He identifies fifteen distinct methods to hack MFA, with AI-crafted attacks bypassing traditional filters by targeting human judgment rather than the technology itself.
You think 2-factor authentication is protecting your accounts? This cybersecurity expert just revealed exactly how AI makes that completely useless. People think the attackers are using AI to somehow get into the back of a network. They're not. They're using AI to fool you into turning over your MFA or authorizing the hacker on your auth app. And so what they've done is use AI to compromise MFA and auth apps. And we think that 2FA code is secure. It is not. It is hacked every minute. There are 15 methods to hack your MFA. 15. And you're going to be willing to give your MFA code to someone, I guarantee it. And so this is a real problem because AI can spoof emails, can make phishing emails. They're perfect. They get through the phishing filters. It can make a spoofed site that's perfect. It can make a spoofed Trisha that interacts like Trisha. And I think it is Trisha. And Trisha says, send the money to here. And I do, right? So all of these are happening with AI. And basically they're using AI to fool humans is all they're doing.
