> Unfortunately, Mailchimp doesn't offer phishing-resistant 2FA… By no means would I encourage people not to enable 2FA via OTP, but let this be a lesson as to how completely useless it is against an automated phishing attack that can simply relay the OTP as soon as it's entered.
Which forms of 2FA would be resistant to the attack Troy faced?
Which forms of 2FA would be resistant to the attack Troy faced?