The National Computer Emergency Response Team (NCERT) has issued a security advisory regarding a sharp increase in 2FA bypass cyberattacks targeting cloud platforms.
Attackers are using phishing tactics, including fake login portals, to steal credentials, undermining two-factor authentication systems.
NCERT reports a significant rise in SVG-based phishing campaigns, with threats exploiting HTML5 CAPTCHA forms and malicious scripts.
NCERT advises institutions to audit their authentication systems, apply security patches, and engage in red team simulations to identify weaknesses in 2FA setups.