Vulnerabilities of SMS-Based 2FA