Multi-factor authentication works best but some attacks can circumvent it\, warns FBI