When employed, various techniques to bypass MFA are observed – from social engineering, through SIM-swapping and even compromising MFA/telecoms providers.  Zero Trust network architecture and strong security hygiene are the best defenses against this type of threat actor.