Prompt bombing (or push bombing) attacks use loopholes in MFA systems to bombard users with push notifications and hack their accounts. Some hackers, as in the case of Uber, even contact their victims on WhatsApp to get them to accept these authentication requests.