What are common methods to bypass 2FA verification? I know only one, get a copy of identity document, and try to re-issue simcard in mobile operator office. Or try to hack person, find and steal "special codes" that comes together when you set 2FA. Long method - social engineering. However, if a person is cautious, I dont see how someone can get his 2FA or make him turn-off this feature.
I have to admit that your comment made me laugh... I never thought about how 2FA could be hacked. I believe you explained it nicely.
Let's say somehow, in some way, you got a copy of the identity document...but the next part is hilarious, "try to re-issue simcard"... mission impossible.
It's worth noting that some 2FA authentication services offer their users cloud backup storage, and this is one of the easiest attack vectors that hackers can use to gain access to a user's 2FA. And phishing can also be one way for hackers to steal an account with 2FA.