Two-factor authentication usually will work even if the attacker controls the supplicant's computer.

Question

Quizplus · Accepted Answer

Two-factor authentication typically requires something you know (such as a password) and something you have (such as a security token). If an attacker compromises the supplicant's computer, they may be able to obtain the password and bypass the first factor of authentication. However, they would not be able to replicate the second factor (such as a physical security token), which would still provide an additional layer of security. However, there are still potential vulnerabilities with two-factor authentication that attackers could exploit, such as social engineering or SIM swapping attacks.

Two-Factor Authentication Usually Will Work Even If the Attacker Controls