PJ-T&C Official site

Contact Us

Reasons why SMS and app OTP cannot be prevented.

Real-time phishing attack countermeasures! Reasons why SMS and app OTPs cannot prevent them and case studies.

We would like to introduce a case study on the implementation of the Swissbit iShield Key 2 FIDO2. There was a challenge in that SMS authentication and TOTP (one-time codes) from authentication apps are vulnerable to real-time phishing attacks (AiTM: Adversary-in-the-Middle), where attackers can spoof legitimate login pages and relay the OTP entered by users in real-time. In this case study, by introducing this product, which can operate as an authenticator independent of the device, we achieved authentication that separates the dependencies. [Challenge] ■ SMS authentication and TOTP (one-time codes) are vulnerable to real-time phishing attacks (AiTM: Adversary-in-the-Middle). *For more details, please download the PDF or feel free to contact us.

Related Link - https://security.pj-tc.com/services/swissbit-ishie…

basic information

【Product Specifications】 ■Supported Standards: FIDO2 / CTAP2.1 / WebAuthn, FIDO U2F ■Connection: USB Type-A / USB Type-C (select at purchase), NFC compatible *For more details, please download the PDF or feel free to contact us.

Price range

Delivery Time

Applications/Examples of results

For more details, please download the PDF or feel free to contact us.

catalog（1）

Download All Catalogs

[Free Distribution] Certification Security for Small and Medium-sized Enterprises in the Era of Remote Work

TECHNICAL

Contact this catalog

Recommended products

  • 認証セキュリティー

Security Key "GoTrust Idem Key"

PJ-T&C

  • 認証セキュリティー

Security Key "VinCSS Touch 1"

PJ-T&C

  • 認証セキュリティー

Security Key "ATKey.Pro"

PJ-T&C

  • 認証セキュリティー

How to implement a security key for multi-factor authentication in Salesforce.

PJ-T&C

  • 認証セキュリティー

How to implement a security key in Microsoft Entra ID

PJ-T&C

  • 認証セキュリティー

Security Key "Swissbit iShield Key 2"

PJ-T&C

  • 認証セキュリティー

Swissbit iShield Key 2 Pro

PJ-T&C

  • 認証セキュリティー

PIV-compatible security key "GoTrust Idem Key"

PJ-T&C

  • 認証セキュリティー

Security Key "VinCSS FIDO2 Touch 1"

PJ-T&C

  • 認証セキュリティー

VinCSS FIDO2 Fingerprint

PJ-T&C

  • 認証セキュリティー

Security Key "AuthenTrend ATKey.Pro"

PJ-T&C

  • 認証セキュリティー

Responding to the mandatory implementation of phishing-resistant MFA by Salesforce.

PJ-T&C

  • 認証セキュリティー

Discontinuation of SMS and voice authentication for Microsoft Entra ID.

PJ-T&C

  • 認証セキュリティー

MFA in an environment where smartphones are prohibited.

PJ-T&C

  • 認証セキュリティー

Authentication for shared PCs and kiosk terminals

PJ-T&C

  • 認証セキュリティー

Companies that only need a sync passkey and companies that require a hardware key.

PJ-T&C

  • 認証セキュリティー

List of FIDO2 Security Key AAGUIDs

PJ-T&C

  • 認証セキュリティー

What is the YubiKey 5 series?

PJ-T&C

  • 認証セキュリティー

What is the YubiKey Bio series?

PJ-T&C

  • 認証セキュリティー

Differences between YubiKey and other companies' FIDO2 security keys.

PJ-T&C

  • 認証セキュリティー

Reasons why SMS and app OTP cannot be prevented.

PJ-T&C

  • 認証セキュリティー

Whether the passkey on the device is sufficient or if a security key is needed.

PJ-T&C

  • 認証セキュリティー

[Example] Considerations for the Required Number of Security Keys

PJ-T&C

  • 認証セキュリティー

Cases where a hardware key is required for a security key and cases where it is not required.

PJ-T&C

  • 認証セキュリティー

Selection criteria for security keys with built-in fingerprint authentication.

PJ-T&C

  • 認証セキュリティー

Three methods of passkeys

PJ-T&C

  • 認証セキュリティー

Authentication methods that meet/do not meet the requirements for mandatory phishing-resistant MFA.

PJ-T&C

Distributors

PJ-T&C
PJ-T&C
Official site
Phone number/address

What security is suitable for remote work? How should we respond to Salesforce's multi-factor authentication (MFA)? What is single sign-on (SSO)? You can find security solutions that are appropriate for each company.

Product/Service List (30)