A social engineering technique called 'MFA Fatigue', aka 'MFA push spam', is growing more popular with threat actors as it does not require malware or phishing infrastructure and has proven to be successful in attacks.
Here's a good, recent description of the TTP that has been trending in cybersecurity industry news for the past year or so:
Most of your top-tier competitors have released product updates this year to address this problem. Some examples are below:
- Competitor implementation: Azure MFA (Number Matching)
- Competitor implementation: CIsco DUO (Verified Duo Push)
- Competitor implemention: Okta (Number Challenge)