iPhone Users Bombarded by 'MFA Fatigue' Phishing Attack
• "MFA Fatigue" phishing attack floods iPhones with endless password reset prompts to trick users into allowing access.
• Attackers exploit human tendency to quickly click "Allow" to notification prompts that can't be dismissed.
• Victims report receiving 100+ password reset prompts on all Apple devices, freezing them, followed by spoofed Apple Support calls.
• Apple's current system needs rate limiting or access controls, as just a phone number, email, and CAPTCHA can send unlimited prompts.
• Security experts advise limiting authentication attempts over time, blocking after failures, adding location/biometrics requirements to prevent attacks.