I have two factor authentication. I understand that by using a keylogger an attacker can bypass that authentication.
However I think that if I check regularly on saved logins or past logins I will see unusual activity. Then I can assume that my account is not pwned. Am I wrong?
How can an attacker bypass that mechanism?