The Interplay of 2FA and Phishing: A Review of Attack Routes and Booth dealings

Read full text
Authors: Henry Peter Ovili, Opuh Jude Iwedike, Orugba Kenneth Obokparo, Adamugono Endurance, Ekeno Precious Eroboghene, Samuel Chukwuemeka Nwachokor
Cited by: 0

Abstract

Phishing residues one of the most predominant and fruitful cyberattack methods, unswervingly sprouting to bypass security dealings, comprising traditional Two-Factor Authentication (2FA). This logical review offers a widespread exploration of the up-to-date phishing techniques unambiguously designed to circumvent 2FA protections. We pigeonhole attack routes, such as reverse proxy phishing, social engineering-based token interception, and "man-in-the-browser" attacks, and scrutinize how these systems abuse both technological and human vulnerabilities. The analysis also weighs the efficacy of various booth dealings, including FIDO2/U2F hardware tokens, app-based authentication, and user education initiatives. By studying the prose on both the threats and the fortifications, this paper aims to offer a clear thoughtful of the dynamic interplay between phishing attacks and 2FA systems. The findings will oblige as a valuable resource for security professionals, researchers and users pursuing to identify and implement extra robust security stratagems in an epoch of increasingly sophisticated assaults.

Fields of Study & Subjects

Spam and Phishing Detection User Authentication and Security Systems Information and Cyber Security

Publication details

Journal / source
Zenodo (CERN European Organization for Nuclear Research)
Publication date
9 February 2026