Malicious actors are finding ways to get past two-factor authentication. So-called adversary-in-the-middle attacks take advantage of weaker authentication methods to access accounts.