Kevin Surace explains that 90% of ransomware attacks start with stolen identities, and hackers now routinely bypass MFA by tricking users into handing over their authentication tokens. Traditional MFA alone no longer stops them.
This AI expert just exposed the biggest cybersecurity mistake companies are still making, and hackers are taking advantage of it.
Statistics are really clear. 90% of all ransomware attacks happen because of identity. And in fact, today happen 100% because of compromising MFA or the auth apps that you rolled out. Now let me tell you the reason why. All I have to do is convince the human to give it to me.
And I'll give you an example.
AI can now create absolute perfect unique phishing emails for every employee in a company. Unique. And there's no links in the email, but there's an attachment, a PDF, a calendar invite, Something else. People open the attachment. It doesn't look like a dangerous attachment, and the email came from DocuSign or Okta or some known thing. The an employee opens the email, right? Clicks on the PDF. It says you've got to update your employment record. Blah blah blah blah blah. Here's the link. They click on the link and they go to their page. So they log in. They type their ID. They type their password. The auth app comes up and says, "Is this you?" And you say, "Yes, it's me." The whole time, everything was getting relayed to the hacker in Russia. Okay, so what's the solution? The answer is biometric authentication. Biometric assured identity. Basically, what these do is they use your fingerprint to get into any application, and without the fingerprint, you can't get in. So your fingerprint stored inside the device, but the device goes with you. You can log into your phone, you can log into your Mac, you can log into Windows, you can log into Linux. Doesn't matter; it all works without your fingerprint. No one gets in, which means the hacker can't get in because they don't have your fingerprint, and it's domain bound to the original domain you logged into. So it doesn't work on a spoofed domain, right? Spoofed page, and you have to be within three feet of the logging in computer, and a hacker in Russia. Is not within 3 feet of you.
