MFA SAFETY TRAINING
Text size

Attack Simulator

Someone has bought John's email address and password from a criminal forum. They are about to try them on his bank.

You are going to play that attacker. The password is real and it works, so the only thing left standing between you and his money is the second check on his account.

What you will do

  1. Pick a second check. A code by text, a code in an app, or a Yes / No popup on his phone.
  2. Sign in with the stolen password. It is listed on the page, ready to copy.
  3. Try to get past the second check. John's phone sits at the bottom right. You can pull it up, but remember a real attacker never could.
  4. Read what happened. After each attempt you get told whether you got in, and why.

Run it three times, once per check, and the differences between them speak for themselves.

This is a safe practice page. JU Bank is not a real bank, John is not a real person, and nothing you type here is sent anywhere or stored.

Begin simulation Back to homepage