Two-factor authentication (2FA) is very secure, but not invulnerable. There are tricks and loopholes that hackers can exploit to take over an account.

https://www.pcworld.com/article/2424573/watch-out-hackers-is-two-factor-login-insecure.html