(Click on the image to Greatly Enlarge)

Image from GTC

A new report this afternoon states that Apple Inc. users have recently been facing a new and troubling threat known as multi-factor authentication Fatigue Attack or MFA bombing attacks or push notification spam.

This tactic, as described by Brian Krebs at Krebs on Security, involves a continuous stream of MFA requests being sent to users, prompting them to reset their Apple ID passwords.

By clicking "Allow," users are unwittingly allowing hackers to gain access to their Apple ID passwords and seize control of their accounts, which can affect all devices linked to the same ID. This attack strategy aims to induce panic and elicit compliant responses by sending a deluge of notifications and MFA messages to trick users into resetting their passwords.

Once this is done, attackers follow up with spoofed calls masquerading as Apple representatives, seeking sensitive information under the guise of protecting the victim's account from the ongoing attack. The ultimate goal is to acquire a one-time code to confirm a password reset or login attempt.

Parth Patel, a startup founder in the AI industry, shared his experience on X on Saturday in detail on how all of his Apple devices were bombarded with over 100 notifications requesting permission to reset his Apple password. These notifications were so urgent that they effectively locked up his devices until he addressed them. The attackers mimicked the official Apple helpline and requested an OTP that Patel had just received via text, emphasizing that it should not be shared with anyone.

For more, read the full report by Markets Insider.

It's being reported this afternoon that United States District Judge Vince Chhabria dismissed an antitrust lawsuit brought against Apple by Venmo and Cash App customers over allegations the California company’s Apple Cash product was anti-competitive.

The lawsuit, initially filed on Nov. 17, 2023, in San Jose, sought to hold Apple accountable for its perceived monopolistic practices involving the Apple iOS App Store.

Per the complaint, Apple allegedly makes it difficult or impossible for competitors to the Apple Pay service to introduce desirable features such as integrating decentralized cryptocurrency payments into existing or new products and services.

As such, the complainants allege that Venmo, CashApp, and other existing or new services are unable to introduce features that would lead to competitive pricing and improved functionality for iOS end users.

Judge Chhabria granted Apple’s motion for dismissal on March 26, 20. According to the case filing, the complaint suffered from “several fatal issues.”

The filing goes on to state that the plaintiffs failed to establish what antitrust actions took place, nor did they establish why competitors such as Zelle weren’t included in the initial complaint. It also refers to the plaintiff’s suit as “speculative,” and outlines what the court perceives as a flawed premise. For more on this, read the full report by cointelegraph.

PayPal acquired the person-to-person payment tool company Venmo in 2013 for $800 million.

Side Note: In 2015, Patently Apple posted an IP report titled "Apple Working on new Apple Pay Wallet service for Person-to-Person Financial Transactions," a Venmo-like service.

(Click on image to Enlarge) Photos of: Elisabeth Moss and Kerry Washington

U.S. Attorney General Garland hold news conference after DOJ Sues Apple over iPhone Monopoly

(Click on image to Greatly Enlarge)

Photo: Reuters