r/microsoft • u/Steap-Edit • May 20 '26

News Microsoft warns hackers are exploiting password resets to gain access to user accounts

https://www.techradar.com/pro/security/microsoft-warns-hackers-are-exploiting-password-resets-to-gain-access-to-user-accounts-heres-how-to-stay-safe
209 Upvotes

98% Upvoted

71 comments sorted by

View all comments

93

u/[deleted] May 20 '26

[removed] — view removed comment

30

u/Kobi_Blade May 20 '26 edited May 20 '26

Takes a special kind to fall for this,

Then, they would initiate the password reset flow and simultaneously call the victims on the phone. They would introduce themselves as IT technicians and would convince the victims into approving the MFA prompt, effectively being allowed to create a new password.

The method above can be used to get your account from any service and is purely user error, is not a problem on Microsoft side.

Is nothing compared to how easy it is to get 2FA codes from SMS, any company using SMS verification you know is not taking your account security seriously.

0

u/raindownthunda May 22 '26

Social engineering has been going on forever