A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Repeated unauthorized Microsoft Authenticator sign-in requests
Hello Microsoft Support Team,
I am experiencing repeated unauthorized sign-in approval requests through Microsoft Authenticator for my personal Microsoft account.
Issue description:
I receive unexpected sign-in approval requests that I did not initiate.
One suspicious attempt originated from an IP address geolocated to Gyeonggi-do, South Korea.
The operating system displayed was Windows.
The requests use Microsoft Authenticator's number-matching verification.
I have not attempted to sign in from this location or device.
I have not approved any of these suspicious requests.
Security concerns:
I suspect that someone may be attempting unauthorized access to my account, potentially through an MFA fatigue (push bombing) attack.
I am particularly concerned about why these authentication requests continue to reach my device despite not being initiated by me.
Questions for Microsoft:
Does receiving these number-matching requests indicate that an attacker already knows my account password, or can they be triggered without valid credentials?
How can I identify and block the source of these unauthorized sign-in attempts?
Is there a way to stop repeated unauthorized Authenticator prompts without disabling MFA?
Can Microsoft investigate whether my account has experienced a successful unauthorized login?
What additional security measures would Microsoft recommend to prevent these attacks?
I would appreciate guidance on securing my account and preventing further unauthorized authentication requests.
I can provide a redacted screenshot of the suspicious sign-in request if needed.
Thank you for your assistance.