--- title: Bots Are Stealing MFA Codes and Accessing Accounts - The New Cyber Threat in 2021 description: One-time password (OTP) bots are tricking users into sharing their MFA codes, handing over access to their accounts and private data. Here is what you should know about 2021's latest cyberattack strategy. image: https://blog.seedspark.com/hubfs/phishing-6573326-1.png --- [![logo-white-2020](https://blog.seedspark.com/hs-fs/hubfs/logo-white-2020.png?width=80&height=80&name=logo-white-2020.png "logo-white-2020")](https://seedspark.com/) [![logo-square](https://blog.seedspark.com/hs-fs/hubfs/logo-square.png?width=55&height=54&name=logo-square.png "logo-square")](https://seedspark.com/) [![Contact Us](https://no-cache.hubspot.com/cta/default/1546797/3ad3da3a-9602-4c46-afb0-274659a1f959.png)](https://cta-redirect.hubspot.com/cta/redirect/1546797/3ad3da3a-9602-4c46-afb0-274659a1f959) - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/mfa-code-stealing&title=Bots%20Are%20Stealing%20MFA%20Codes%20and%20Accessing%20Accounts%20-%20The%20New%20Cyber%20Threat%20in%202021&description=One-time%20password%20(OTP)%20bots%20are%20tricking%20users%20into%20sharing%20their%20MFA%20codes,%20handing%20over%20access%20to%20their%20accounts%20and%20private%20data.%20Here%20is%20what%20you%20should%20know%20about%202021's%20latest%20cyberattack%20strategy.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/mfa-code-stealing&text=Bots%20Are%20Stealing%20MFA%20Codes%20and%20Accessing%20Accounts%20-%20The%20New%20Cyber%20Threat%20in%202021%20-%20https://blog.seedspark.com/blog/mfa-code-stealing) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/mfa-code-stealing&title=Bots%20Are%20Stealing%20MFA%20Codes%20and%20Accessing%20Accounts%20-%20The%20New%20Cyber%20Threat%20in%202021&summary=One-time%20password%20(OTP)%20bots%20are%20tricking%20users%20into%20sharing%20their%20MFA%20codes,%20handing%20over%20access%20to%20their%20accounts%20and%20private%20data.%20Here%20is%20what%20you%20should%20know%20about%202021's%20latest%20cyberattack%20strategy.) 03 November 2021 Wednesday # Bots Are Stealing MFA Codes and Accessing Accounts - The New Cyber Threat in 2021 By [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) In: [cybersecurity](https://blog.seedspark.com/blog/topic/cybersecurity) Cybersecurity has quickly evolved over the last decade. From simple pin numbers and passwords to more complex password requirements and even passphrases, users around the world have constantly upped the ante in an effort to fight back against a nearly constant stream of attacks coming from every angle. Multi-factor authentication, or MFA, has been the gold standard of account security. MFA improves account security by requiring a login confirmation from a secondary device, making remote attacks and unregistered access nearly impossible - until now.  A new type of social engineering attack is being used to trick users into handing over access to their accounts. In traditional social engineering strategies, bad actors contact users directly, pretending to be from a reputable company in an attempt to convince the user into sharing their login information or other sensitive data. New bot networks are taking humans out of the equation, using convincing "robocall" messages that are supposedly from popular companies that trick users into handing over their account access. These bots, known as one-time password (OTP) bots are posing a major threat to accounts around the world. Here's how they work: 1. Bad actor attempts a login, requesting an MFA code that is sent to the user's device.  2. An automated bot calls the user, requesting the MFA code. 3. A convinced user enters the MFA code, which is then entered by the bot. 4. The user's account is now compromised. News of this attack comes from [Vice reporter Joseph Cox](https://www.vice.com/en/article/y3vz5k/booming-underground-market-bots-2fa-otp-paypal-amazon-bank-apple-venmo), who shares that these convincing bots have tapped into user accounts from Amazon, Coinbase, PayPal, and more, all with relative ease because of how convincing the ploy is. Whether the MFA code is sent via phone, text, or third-party app, the only way to combat this type of strategy so far is to educate users and spread awareness of the issue.  While traditional phishing attacks are dangerous enough, these bot attacks are even more dangerous. These attacks are scalable, requiring no social engineering skills from the attacker, and they can be *very* convincing. Below is a call recorded by Cox that shares what a scam call could sound like.   Amazon, Chase Bank, Coinbase, and more have publicly acknowledged the issue, letting users know that automated bots will never contact them and ask for personal information. It's clear that these new attacks are here to stay, with Motherboard finding that this type of attack has surged in popularity throughout 2021 in online hacking groups because of its simplicity, ease, and efficacy.  While there is no one-stop solution that provides complete security, there are several steps that users can take to protect their data online. Always use a unique password on each account, preferably created through a password generator and managed through a password management platform like Last Pass (a team that we partner with for our password management services.) Remember that professional institutions will never ask for private information over the phone; if you have a customer service issue or would like to get in touch with a company it's best to contact them directly through their website's contact page. It's also important to stay up to date on the latest attacks to understand the telltale signs so that you're aware of the situation *when* one happens - it's not a matter of if, but when. --- *SeedSpark partners with small- and medium-sized businesses to deliver technology solutions that meet today's needs while helping them prepare for tomorrow. We've partnered with SentinelOne to offer AI-powered cybersecurity for our clients, providing tools that help protect against today's top cybersecurity threats as they happen. Contact our team today to learn more about SeedSpark Cybersecurity for small businesses. * *[![Learn More About SeedSpark Cybersecurity](https://no-cache.hubspot.com/cta/default/1546797/626b2ef7-3ca4-4bb5-ad7f-fe80e234836f.png)](https://cta-redirect.hubspot.com/cta/redirect/1546797/626b2ef7-3ca4-4bb5-ad7f-fe80e234836f)* **Tags:** [cybersecurity](https://blog.seedspark.com/blog/topic/cybersecurity) Share: - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/mfa-code-stealing&title=Bots%20Are%20Stealing%20MFA%20Codes%20and%20Accessing%20Accounts%20-%20The%20New%20Cyber%20Threat%20in%202021&description=One-time%20password%20(OTP)%20bots%20are%20tricking%20users%20into%20sharing%20their%20MFA%20codes,%20handing%20over%20access%20to%20their%20accounts%20and%20private%20data.%20Here%20is%20what%20you%20should%20know%20about%202021's%20latest%20cyberattack%20strategy.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/mfa-code-stealing&text=Bots%20Are%20Stealing%20MFA%20Codes%20and%20Accessing%20Accounts%20-%20The%20New%20Cyber%20Threat%20in%202021%20-%20https://blog.seedspark.com/blog/mfa-code-stealing) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/mfa-code-stealing&title=Bots%20Are%20Stealing%20MFA%20Codes%20and%20Accessing%20Accounts%20-%20The%20New%20Cyber%20Threat%20in%202021&summary=One-time%20password%20(OTP)%20bots%20are%20tricking%20users%20into%20sharing%20their%20MFA%20codes,%20handing%20over%20access%20to%20their%20accounts%20and%20private%20data.%20Here%20is%20what%20you%20should%20know%20about%202021's%20latest%20cyberattack%20strategy.) ### Written by [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) As a lifelong fan of technology, Sam has always had a deep interest in learning about the latest innovations and how they are revolutionizing the worlds of business, marketing, and entertainment. As Social Media and Content Specialist at SeedSpark, he spends time chasing the newest trends and breakthroughs pushing the digital transformation in our personal and professional lives. - [**](https://www.linkedin.com/in/samuel-adams-717b42147/) PREVIOUS POST [** Celebrating 15 Years of SeedSpark ](https://blog.seedspark.com/blog/celebrating-15-years-of-seedspark) [**](https://blog.seedspark.com/blog/mfa-code-stealing#top) Next Post [Custom Applications for Construction Services - Why Have a Custom App? **](https://blog.seedspark.com/blog/custom-apps-construction) [Content Title](https://blog.seedspark.com/blog/mfa-code-stealing#) Description ### Search ### Recent Posts [ Building a Resilient Business: Strategies for Navigating Economic Uncertainty ](https://blog.seedspark.com/blog/building-a-resilient-business-strategies-for-navigating-economic-uncertainty) [Chad Jenkins](https://blog.seedspark.com/blog/author/chad-jenkins) Feb 1, 2024 [ Harnessing Data for Business Success: A Comprehensive Guide to Data-Driven Decision-Making ](https://blog.seedspark.com/blog/harnessing-data-for-business-success-a-comprehensive-guide-to-data-driven-decision-making) [Chad Jenkins](https://blog.seedspark.com/blog/author/chad-jenkins) Jan 8, 2024 [ Top Business Trends of 2024: Strategies for Growth and Success ](https://blog.seedspark.com/blog/top-business-trends-of-2024-strategies-for-growth-and-success) [Chad Jenkins](https://blog.seedspark.com/blog/author/chad-jenkins) Jan 4, 2024 [ Empowering Organizations with CISA's Cybersecurity Awareness Month 2023 Toolkit ](https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) Oct 26, 2023 [ Four Essential Steps to Enhance Your Online Safety ](https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) Oct 19, 2023 ### Popular Posts [ The 8 Best Productivity Tools Included with Microsoft 365 ](https://blog.seedspark.com/blog/meet_office365) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Apr 21, 2021 [ Bots Are Stealing MFA Codes and Accessing Accounts - The New Cyber Threat in 2021 ](https://blog.seedspark.com/blog/mfa-code-stealing) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Nov 3, 2021 [ What is Windows 11 S Mode and Should You Use It? ](https://blog.seedspark.com/blog/windows11-smode) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Sep 17, 2021 [ Alternatives to Using SMS for 2-factor Authentication ](https://blog.seedspark.com/blog/alternatives-to-using-sms-for-2-factor-authentication) [Robert Griffin](https://blog.seedspark.com/blog/author/robert-griffin) - Mar 9, 2023 [ How to Use Shifts in Microsoft Teams for Your Organization ](https://blog.seedspark.com/blog/shifts_microsoft_teams) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Jul 2, 2020 ## Related Post - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit&title=Empowering%20Organizations%20with%20CISA's%20Cybersecurity%20Awareness%20Month%202023%20Toolkit&description=With%20the%20end%20of%20October%20just%20around%20the%20corner,%20that%20also%20means%20it%20is%20the%20end%20of%20Cybersecurity%20Awareness%20Month.%20The%20Cybersecurity%20and%20Infrastructure%20Security%20Agency%20(CISA)%20has%20taken%20a%20significant%20step%20in%20this%20direction%20by%20unveiling%20the%20Cybersecurity%20Awareness%20Month%202023%20Toolkit.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit&text=Empowering%20Organizations%20with%20CISA's%20Cybersecurity%20Awareness%20Month%202023%20Toolkit%20-%20https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit&title=Empowering%20Organizations%20with%20CISA's%20Cybersecurity%20Awareness%20Month%202023%20Toolkit&summary=With%20the%20end%20of%20October%20just%20around%20the%20corner,%20that%20also%20means%20it%20is%20the%20end%20of%20Cybersecurity%20Awareness%20Month.%20The%20Cybersecurity%20and%20Infrastructure%20Security%20Agency%20(CISA)%20has%20taken%20a%20significant%20step%20in%20this%20direction%20by%20unveiling%20the%20Cybersecurity%20Awareness%20Month%202023%20Toolkit.) ## [Empowering Organizations with CISA's Cybersecurity Awareness Month 2023 Toolkit](https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) With the end of October just around the corner, that also means it is the end of Cybersecurity Awareness Month. While the month might soon be over, cybersecurity issues and threats most certainly are not. The Cybersecurity and Infrastructure Security Agency (CISA), in partnership with the National Cybersecurity Alliance (NCA), has taken a significant step in this direction by unveiling the Cybersecurity Awareness Month 2023 Toolkit. This comprehensive resource is designed to empower organizations, IT professionals, and individuals with the knowledge and tools needed to navigate the complex world of cyber threats.   By [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) In: [Technology](https://blog.seedspark.com/blog/topic/technology) [**](https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety&title=Four%20Essential%20Steps%20to%20Enhance%20Your%20Online%20Safety&description=Whether%20you're%20an%20individual%20looking%20to%20protect%20your%20personal%20data%20or%20an%20IT%20professional%20tasked%20with%20safeguarding%20company%20information,%20there%20are%20fundamental%20steps%20you%20can%20take%20to%20enhance%20online%20safety.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety&text=Four%20Essential%20Steps%20to%20Enhance%20Your%20Online%20Safety%20-%20https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety&title=Four%20Essential%20Steps%20to%20Enhance%20Your%20Online%20Safety&summary=Whether%20you're%20an%20individual%20looking%20to%20protect%20your%20personal%20data%20or%20an%20IT%20professional%20tasked%20with%20safeguarding%20company%20information,%20there%20are%20fundamental%20steps%20you%20can%20take%20to%20enhance%20online%20safety.) ## [Four Essential Steps to Enhance Your Online Safety](https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) As cyber threats continue to evolve, both individuals and businesses must be proactive in their approach to cybersecurity. Whether you're an individual looking to protect your personal data or an IT professional tasked with safeguarding company information, there are fundamental steps you can take to enhance online safety. Here are four essential steps to consider:   By [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) In: [Technology](https://blog.seedspark.com/blog/topic/technology) [**](https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023&title=Secure%20Our%20World:%20The%20New%20Mantra%20for%20Cybersecurity%20in%202023%20and%20Beyond&description=As%20cyber%20threats%20continue%20to%20evolve,%20so%20must%20our%20approach%20to%20safeguarding%20our%20digital%20realm.%20Enter) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023&text=Secure%20Our%20World:%20The%20New%20Mantra%20for%20Cybersecurity%20in%202023%20and%20Beyond%20-%20https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023&title=Secure%20Our%20World:%20The%20New%20Mantra%20for%20Cybersecurity%20in%202023%20and%20Beyond&summary=As%20cyber%20threats%20continue%20to%20evolve,%20so%20must%20our%20approach%20to%20safeguarding%20our%20digital%20realm.%20Enter) ## [Secure Our World: The New Mantra for Cybersecurity in 2023 and Beyond](https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023) As cyber threats continue to evolve, so must our approach to safeguarding our digital realm. Enter "Secure Our World" – the groundbreaking cybersecurity awareness program launched by the Cybersecurity and Infrastructure Security Agency (CISA). As we delve into 2023 and look towards the future, this initiative promises to redefine our understanding and approach to cybersecurity.   By [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) In: [Technology](https://blog.seedspark.com/blog/topic/technology) [**](https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023) ## Growth Is Just One Click Away Want to chat? Just share some project details and a member of our sales team will be in touch to learn more about your vision and how we can help!   ##### How can we grow together? [![Call Now](https://no-cache.hubspot.com/cta/default/1546797/e8917216-677b-4754-8a92-11da535e5577.png)](https://cta-redirect.hubspot.com/cta/redirect/1546797/e8917216-677b-4754-8a92-11da535e5577) ## Join Our Newsletter ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Samuel Adams", "url" : "https://blog.seedspark.com/blog/author/samuel-adams" }, "dateModified" : "2021-11-03T16:05:58.227Z", "datePublished" : "2021-11-03T16:05:58.000Z", "headline" : "Bots Are Stealing MFA Codes and Accessing Accounts - The New Cyber Threat in 2021", "image" : [ "https://blog.seedspark.com/hubfs/phishing-6573326-1.png" ], "mainEntityOfPage" : { "@id" : "https://blog.seedspark.com/blog/mfa-code-stealing", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.seedspark.com/hubfs/SS_Logo_R_Blue_Horizontal.svg" }, "name" : "SeedSpark" } } ```