Another instance of compromise of SMS-based 2FA. This time it is combined with phishing to capture the user ID and password first.

https://arstechnica.com/information-technology/2018/12/iranian-phishers-bypass-2fa-protections-offered-by-yahoo-mail-and-gmail/