MFA verifies who logged in. It has no idea what they do next.

What happens after MFA succeeds? How session token theft lets attackers move laterally through enterprise networks without ...
IEEE

A Comparison of a Touch-Gesture- and a Keystroke-Based Password Method: Toward Shoulder-Surfing Resistant Mobile User Authentication

Abstract: The pervasive use of mobile devices exposes users to an elevated risk of shoulder-surfing attacks. Despite the prior work on shoulder-surfing resistance of mobile user authentication methods ...
IEEE

Improved Secure and Efficient Chebyshev Chaotic Map-Based User Authentication Scheme

Abstract: A Chebyshev chaotic map is a method for implementing efficient authentication. Recently, Chatterjee et al. proposed an authentication scheme for multi ...