Episode 38 — Alexandria: Authenticator App Showed All Microsoft OneDrive Documents (Summer 2024)

SLII: Surveillance, Life Invasion

Excerpt (bullets)

• During analysis, noticed could see all documents in authenticator app.
• Immediately deleted app, never used it again on that phone.
• Photo: Authenticator App Screen

Full Narrative

In summer 2024, while conducting similar analysis I noticed that I could see all my documents in the authenticator app. I immediately deleted the app and never used it again on that phone. An app meant for two-factor authentication had been compromised to provide access to my entire document library.

Category Codes

• DIG.APP (App compromise for document access)
• DIG.2FA (Two-factor app exploited)