Authentication & Secrets
MFA Fatigue
Also: push bombing, prompt bombing
Spamming a user with approval prompts until they tap Approve to make them stop.
In more detail
The attacker already has the password and triggers repeated push notifications, often at night. Number matching, showing the login location, rate limiting prompts and passkeys all reduce the risk.