Retool breach: SMS phishing, deepfaked voice call and synced MFA codes ยท updates https://pwn.watch/i/retool-sms-phishing-google-authenticator-sync-2023 An attacker phished a Retool employee by SMS, then called them with a deepfaked voice to get an MFA code. Because Google Authenticator synced codes to the employee's Google account, the attacker got their MFA codes too, and took over 27 cloud customer accounts, all in crypto. en Wed, 13 Sep 2023 00:00:00 GMT Retool breach: SMS phishing, deepfaked voice call and synced MFA codes: Retool publishes its write-up https://pwn.watch/i/retool-sms-phishing-google-authenticator-sync-2023 https://pwn.watch/i/retool-sms-phishing-google-authenticator-sync-2023#2023-09-13-1cf04dac Wed, 13 Sep 2023 00:00:00 GMT high <p><a href="https://retool.com/blog/mfa-isnt-mfa">Source</a></p> Retool breach: SMS phishing, deepfaked voice call and synced MFA codes: SMS phishing and voice call lead to compromise of a Retool employee account and 27 cloud customers https://pwn.watch/i/retool-sms-phishing-google-authenticator-sync-2023 https://pwn.watch/i/retool-sms-phishing-google-authenticator-sync-2023#2023-08-27-e5e05fd2 Sun, 27 Aug 2023 00:00:00 GMT high <p><a href="https://retool.com/blog/mfa-isnt-mfa">Source</a></p>