Multi-factor authentication stops most password attacks, so attackers go after the person instead. They trigger a stream of approval requests, often late at night, sometimes with a call or message pretending to be IT.
One tired tap and the attacker is in. Number matching and limits on prompts help, but the flood itself is the signal to act on.
How Centeye handles it
Centeye Gatewatch recognises the prompt flood, treats that approval as suspect, ends the session and asks the engineer to confirm.
Gatewatch: identity protection (ITDR) →Go deeper: How to stop MFA fatigue