MFA Push Bombing / MFA Fatigue - Repeated MFA Denials

Ankit Mehta@Secvyn

•updated Jun 29, 2026•2•0•8

Detects high frequency of denied Multi-Factor Authentication (MFA) requests for a specific user and IP address, indicating potential 'MFA fatigue' or 'MFA bombing' attacks where an adversary attempts to force a user to approve a push notification or code verification.