#607: How Hackers Steal Your Accounts Even With 2FA Enabled

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal

Is Microsoft Defender enough to protect your PC? Malware researcher Leo joins me at Black Hat to discuss antivirus, Windows security and how hackers steal your accounts.

We explore how infostealers target saved passwords and session tokens, why two-factor authentication cannot prevent every account takeover, and how a message from a compromised friend’s account can lead to an infection.

Leo shares practical starting points for investigating your computer, including Autoruns for startup entries, TCPView for linking connections to applications, and Wireshark for examining network traffic. We also discuss password managers, account recovery planning, Windows telemetry and why switching operating systems does not eliminate security risks.

In this interview:

• Microsoft Defender’s strengths and limitations

• Free tools for investigating suspicious Windows activity

• How infostealers and initial access brokers operate

• Stolen session tokens and the limits of 2FA

• Fake download sites, malicious ads and targeted phishing

• Preparing recovery options before your accounts are compromised

• Security and privacy trade-offs across Windows, Linux and macOS