Two factor is not designed to protect against man-in-the-middle attack. The usual purpose of two factor authentication is to protect against password compromisi

Two factor is not designed to protect against man-in-the-middle attack. The usual purpose of two factor authentication is to protect against password compromising (reuse, brute forcing weak passwords, using a stolen password over a different connection or a device). Also if your computer is compromise d nothing can protect you if the only interaction channel is your computer screen. A true two factor would use a side channel to confirm a transaction (main interaction on the desktop screen, confirm with a mobile app).