Security teams have strengthened logins with MFA and conditional access, but attackers are increasingly targeting onboarding and account recovery instead of the authentication flow itself. The article highlights how groups like Scattered Spider and North Korean IT workers exploit weak identity verification at the service desk, and how Specops Verified ID adds document validation and biometric liveness detection to help stop impersonation. #ScatteredSpider #NorthKoreanITWorkers #SpecopsVerifiedID #M&S
Keypoints
- Attackers are targeting identity verification during onboarding and recovery.
- Weak service desk checks can be exploited through social engineering.
- North Korean IT workers have used fake identities to get hired.
- Scattered Spider has abused password reset processes to gain access.
- Specops Verified ID uses document checks and liveness detection to improve trust.