4 ms·

If it's malware that steals cookies, no 2fa is necessary, just set up your cookies and log in like it's a live session