2FA codes can be phished by new pentest tool Posted on January 11, 2019 by nocrackingzone A researcher has published a tool called Modlishka, capable of phishing 2FA codes sent by SMS or authentication apps.