New phishing attack steals your Instagram backup codes to bypass 2FA

A new phishing campaign pretending to be a 'copyright infringement' email attempts to steal the backup codes of Instagram users, allowing hackers to bypass the two-factor authentication configured on the account. [...]

2fa account attack authentication backup backup codes bypass campaign copyright email factor hackers instagram phishing phishing attack phishing campaign security steal