[Tijdreiziger]

The attacker misrepresents themselves as a legitimate user who just wants to set up 2FA on their account.