Hacker News new | ask | show | jobs
by johnl1479 3620 days ago
Likely in the sense that the attacker cannot login into your account using the stolen credentials, as the second factor would not be in their possession.
1 comments

The article links to lastpass multifactor [0] though. I agree that having multifactor enabled on the site the credentials were stolen for would block this attack.

[0] https://helpdesk.lastpass.com/multifactor-authentication-opt...

Hm, you are right. I am not sure how LP multi-factor auth would prevent this.