[rwth-security] "Russian actors bypassed 2FA" – what happened and how to avoid it