Wow! What's the easiest way to stop this kind of attack? Stop all two-factor authentication?