All mainstream web services have an optional 2FA feature, disabled by default but can be enabled by the user. 2FA is available in Facebook, Twitter, Gmail/Google account, Microsoft account and possibly all mainstream online banking websites. However, just like everything in the world, 2FA has certain weaknesses and we will guide you not to fall for tricks that takes advantage of these weaknesses. Fake 2FA apps are usually trojanized version of the original apps. Fake apps are a dime-a-dozen for smartphone users who download apps outside the official app stores.”]
Source: https://hackercombat.com/old-school-ways-to-bypass-two-factor-authentication/