SMS-based 2FA is by far the least secure authentication option, and yet, far too many companies use this method as default. Hackers know this, which is why they target users' 2FA codes to commit ...