https://wccftech.com/chinese-hackers-successfully-managed-to-bypass-2fa-in-recent-wave-of-attacks/

Two-factor authentication (2FA) is often recommended (and enforced) by some companies as an additional layer of security. It is supposedly infallible as one part of the puzzle is always with the user, making it difficult for anyone remotely to compromise a system. While there are ways to bypass 2FA, it is rather difficult. A hacking group reportedly sponsored by the Chinese government has successfully managed to bypass 2FA in an eerily sophisticated way.

According to a report by Dutch cyber-security firm Fox-IT, hacker group APT20 targetted government and private entities in over ten countries including Brazil, China, France, Germany, Italy, Mexico, Portugal, Spain, the United Kingdom, and the United States. Aviation, healthcare, finance, insurance, and energy companies were the primary targets of the hack, which came to light when one of the affected companies contacted Fox-it.