3 ms·
As said in another comment, phishing can circumvent 2fa (just phish the code as well).
by Vespasian 11y ago
As said in another comment, phishing can circumvent 2fa (just phish the code as well).
- Sanddancer 11y ago2fa doesn't necessarily have to be something online. For quarter million dollar transfers, it could, and probably should, require some steps of offline verification, like needing the CFO to sign off on it too, or a quick phone call to make sure everything is on the up and up. Hell, the CEO shouldn't even be handling these transactions. I don't know of a single other place where the CEO would be this involved, especially if transfers of this size are "routine". This is just poor accounting top to bottom.