CISA and FBI warning: Hackers used these tricks to dodge multi-factor authentication and steal email

Watch out for default configuration on MFA implementation.