Known Vulnerabilities in Two-factor Authentication (TFA)