New Android malware can steal 2FA codes from Google Authenticator

guest · Feb 27, 2020

New Android malware can steal 2FA codes from Google Authenticator
February 27, 2020
https://www.androidauthority.com/android-malware-2fa-1087805/

Unfortunately, a new form of Android malware is capable of stealing 2FA codes from Google’s app, according to a report by security firm Threatfabric (via ZDNet). According to the report, a variant of the Cerberus banking trojan emerged with this ability in January 2020.

“Abusing the Accessibility privileges, the Trojan can now also steal 2FA codes from Google Authenticator application. When the app is running, the Trojan can get the content of the interface and can send it to the C2 [command and control – ed] server. Once again, we can deduce that this functionality will be used to bypass authentication services that rely on OTP codes,” reads an excerpt of the report.
The firm says it still presents a major threat to online banking services though. But this could also be a massive threat to other accounts and services that use 2FA, such as email, Google accounts, and more.
Click to expand...

Two-factor authentication apps like Google Authenticator are generally considered to be more secure than SMS-based 2FA.
Nevertheless, we hope to see Google shore up Android’s defenses against this malware, as it likely affects other 2FA apps as well.
Click to expand...

Minimalist · Feb 28, 2020

Still using Google Authenticator? Here's why you should get rid of it today

I've been a Google Authenticator user since the dawn of two-factor authentication (2FA) apps. Released in 2010, it's one of those apps that I use all the time for authenticating logins into various websites and services. Using it has become second nature.

But it has downsides.
Click to expand...

https://www.zdnet.com/article/using-google-authenticator-heres-why-you-should-get-rid-of-it/

Log in or Sign up

New Android malware can steal 2FA codes from Google Authenticator

guest Guest

Minimalist Registered Member

Log in or Sign up

New Android malware can steal 2FA codes from Google Authenticator

guest Guest

Minimalist Registered Member

Useful Searches