Does enabling 2 factor auth help stop this attack?