Bank of America seems to have protection against this type of threat. If you have 2FA enabled, via text to mobile, there is a 2FA test on first login on a new c

Bank of America seems to have protection against this type of threat. If you have 2FA enabled, via text to mobile, there is a 2FA test on first login on a new computer. But they also have an extra 2FA protecting everything that would allow an attacker to transfer money out of the account. Adding a new bill pay payee, changing the address or account info on a payee, and any external wire transfer all require a new 2FA code to be sent and entered every time, no matter what the device. I still wouldn't login to them, or any other financial account, on an untrusted device, though.