https://pwn.watch/t/google-authenticator Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Wed, 13 Sep 2023 00:00:00 GMT https://pwn.watch/i/retool-sms-phishing-google-authenticator-sync-2023 https://pwn.watch/i/retool-sms-phishing-google-authenticator-sync-2023 Wed, 13 Sep 2023 00:00:00 GMT high <p>An attacker phished a Retool employee by SMS, then called them with a deepfaked voice to get an MFA code. Because Google Authenticator synced codes to the employee's Google account, the attacker got their MFA codes too, and took over 27 cloud customer accounts, all in crypto.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> no-fix-needed</p> <p><strong>Latest updates:</strong></p><ul><li>2023-09-13: Retool publishes its write-up (<a href="https://retool.com/blog/mfa-isnt-mfa">source</a>)</li><li>2023-08-27: SMS phishing and voice call lead to compromise of a Retool employee account and 27 cloud customers (<a href="https://retool.com/blog/mfa-isnt-mfa">source</a>)</li></ul>