Is it possible for hackers to bypass 2FA?
I'm dealing with a scary situation at the moment. I'm travelling outside my home country for the next 4 weeks. A few days ago I got logged out of my WhatsApp and couldn't log back in because my mobile network doesn't enable roaming, so I can't get SMS codes.
Turns out someone in my home country somehow fraudulently ported my number to a new SIM and used that to get the codes to try get into my WhatsApp. Luckily I had 2FA turned on and it does not seem they've been able to access it - the "last seen" is still showing up as before the hack and no messages are delivering.
However, I saw that WhatsApp allows bypassing the 2FA if you wait 7 days. I'm working on reversing the SIM swap, but if I can't do this in time, does that mean they could just wait it out and still get access? I can't get anything useful out of the WhatsApp AI bot.