Two-Factor and Two-Step Authentication

Is it still possible to hack into someones account with nowadays security features such as two step authentification and so on?

If you find a way to get into his two step authentification app, or inside his phone and have remote access to it, maybe [However this is a bit sci-fi if you think about it, we aren't in Watch Dogs where you can hack phones with your own phone and get everything possible from it]

Some guys are doing phishing sites (steam for example) which requests an authorization code. After you enter it your account goes to them automatically. I don`t know how they do that but it`s true.

There's a few features on Kali that helps you gain access to peoples phones but its not straight forward, as you should already know nothing ever is.