​Confirmed as an MFA downgrade attack. 

Leave a Reply

Your email address will not be published. Required fields are marked *