Presumably something along these lines: 1. attempt to log in to target's email system 2. "I forgot my password" 3. get 2FA key via SMS 4. enter 2FA key and

Presumably something along these lines: 1. attempt to log in to target's email system 2. "I forgot my password" 3. get 2FA key via SMS 4. enter 2FA key and new password, gain access to email <rummage through email looking for anything interesting> 5. attempt to log in to target's backup system 6. "I forgot my password" 7. get password reset key via email...