{"id":8159,"date":"2022-01-31T16:50:15","date_gmt":"2022-01-31T16:50:15","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/01\/31\/your-iphone-will-no-longer-suggest-2fa-autofill-if-youre-on-a-phishing-site\/"},"modified":"2022-01-31T16:50:15","modified_gmt":"2022-01-31T16:50:15","slug":"your-iphone-will-no-longer-suggest-2fa-autofill-if-youre-on-a-phishing-site","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/01\/31\/your-iphone-will-no-longer-suggest-2fa-autofill-if-youre-on-a-phishing-site\/","title":{"rendered":"Your iPhone will no longer suggest 2FA autofill if you’re on a phishing site"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

Apple is urging companies to send two-factor messages in a new, more secure format in a bid to curb phishing attacks, as first reported by 9to5mac<\/em><\/a>.<\/p>\n

Apple\u2019s code-AutoFill feature makes it so that if a website or an app sends a two-factor authentication code via message, it will appear automatically as an AutoFill suggestion, something that scammers have reportedly started taking advantage of.<\/p>\n

According to 9to5mac<\/em>, when scammers trick people into clicking on fraudulent links, they take the login credentials and use them on the actual website that sends two-factor codes to the user, seeing the code displayed in the AutoFill suggestion gives the user a psychological feeling that the code is legitimate. This is where a new and more secure sending codes of comes in.<\/p>\n

With the new format, your iPhone will only offer AutoFill suggestions if the domain in the message and the domain of the website you\u2019re on match. For example, let\u2019s say you\u2019re trying to log into a website that claims to be Twitter.com, but in reality, it\u2019s a phishing link that reads Twitter.login.info.com, your device won\u2019t offer you an autofill suggestion.<\/p>\n

The new format, in comparison to the old one, looks something like this:<\/p>\n

\"\"<\/p>\n

Image credit: Macworld<\/a><\/em><\/p>\n<\/div>\n

While this isn\u2019t a foolproof method to deter scammers and phishing attacks, as it relies on the user noticing that the authentication code isn\u2019t auto-filling like it usually would on legitimate websites, it is still a good step forward. However, dedicated authentication apps like Google Authenticator<\/a>, Microsoft Authenticator<\/a> and Authy\u00a0<\/a>should serve you better.<\/p>\n

Image credit: Shutterstock<\/a><\/em><\/p>\n

Source: 9to5Mac<\/em><\/a><\/p>\n<\/p><\/div>\n