Both hacking victims I personally know didn't have the 2FA password set and were hacked via SMS hijacking. I'm following this pretty closely and so far haven't

Both hacking victims I personally know didn't have the 2FA password set and were hacked via SMS hijacking. I'm following this pretty closely and so far haven't heard of successful attacks of any other type. One semi-exception is [1], but here the victim's device was captured and most likely used to receive the password reset email. [1] https://habr.com/ru/post/598939/ https://habr.com/ru/post/598939/