Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Google Authenticator

Security incidents tagged Google Authenticator. Newest first.

0 Google Authenticator incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
1
Days without an incident
1152
Longest quiet run: 1135 days (Sep 14–Oct 22)
Show 1 older incident

August 2023 1

  • HighRetool breach: SMS phishing, deepfaked voice call and synced MFA codes

    Retool (cloud) No fix needed

    An attacker phished a Retool employee by SMS, then called them with a deepfaked voice to get an MFA code. Because Google Authenticator synced codes to the employee's Google account, the attacker got their MFA codes too, and took over 27 cloud customer accounts, all in crypto.