MFA fatigue is an attack in which criminals flood a victim with MFA push requests until the victim approves one out of annoyance or confusion. It is one of several ways around MFA, alongside reverse proxies that steal session cookies and device-code phishing that hands over a logged-in session.
