Free · Arcade

Approve or Deny

Your phone lights up with a Microsoft Authenticator push. Some are your own sign-ins. Some are an attacker who has your password, bombing you with prompts hoping you tap Approve to make it stop. Read your situation, read the prompt — then approve the real ones and deny the rest.

The tells

  • A sign-in you did not start — the single biggest signal.
  • Impossible travel, odd hours, an app you never use, a hosting-provider IP.
  • Prompts stacking up (push bombing), or a number that does not match your screen.
  • You clicked sign in seconds ago, from your own device — even if you are travelling.

Approving an attacker hands over your account — that mistake costs the most. A round is 12 prompts from a pool of 30.

Approve or Deny — spot the malicious MFA push | PlayCISO · PlayCISO