https://www.sorinmustaca.com/how-clever-social-engineering-can-overcome-two-factor-authentication/
How clever social engineering can overcome two-factor authentication... or not?