Two-Factor Authentication Might Not Keep You Safe

In 2014, an F.B.I. special agent, Elliott Peterson, described how malware distributed by the botnet GameOver Zeus could compromise two-factor authentication protecting bank accounts in the same way. As long as it significantly decreases the likelihood of account compromises, two-factor authentication is still worth using. In fact, last year Google switched all of its employees from using the Google Authenticator app for two-factor authentication to physical security-key devices that need to be inserted into a computer port to complete a login.

Source: www.nytimes.com