An Android Trojan can steal two-factor authentication codes from Google Authenticator

Two-factor authentication (2FA) is one of the best ways to secure accounts, and Google Authenticator is perhaps the most popular application for this purpose. Unfortunately, a recent form of Android malware is capable of stealing 2FA codes from the Google app. This information is published by Threatfabric, a digital security company. According to the company, a variant of the banking Trojan Cerberus with this ability appeared in January 2020. “By exploiting access privileges, the Trojan can steal 2FA codes from the Google Authenticator app. When the application is running, the Trojan can obtain secret content and send it to its server,” the company said in a report.

Threatfabric notes that this feature of the malware has not been widely deployed yet. Potentially, such a Trojan poses a serious threat to banking services, email services, Google accounts, etc. Two-factor authentication applications such as Google Authenticator are generally considered more secure than SMS-based 2FA. Codes via SMS can be intercepted, and there have been many cases where scammers have used duplicate SIM cards for this purpose. Now, authentication through the application can become insecure. However, it is worth hoping that Google will fix the vulnerabilities in the next updates.

An Android Trojan can steal two-factor authentication codes from Google Authenticator

Two-factor authentication (2FA) is one of the best ways to secure accounts, and Google Authenticator is perhaps the most popular application for this purpose. Unfortunately, a recent form of Android malware is capable of stealing 2FA codes from the Google app. This information is published by Threatfabric, a digital security company. According to the company, a variant of the banking Trojan Cerberus with this ability appeared in January 2020. “By exploiting access privileges, the Trojan can steal 2FA codes from the Google Authenticator app. When the application is running, the Trojan can obtain secret content and send it to its server,” the company said in a report.

Threatfabric notes that this feature of the malware has not been widely deployed yet. Potentially, such a Trojan poses a serious threat to banking services, email services, Google accounts, etc. Two-factor authentication applications such as Google Authenticator are generally considered more secure than SMS-based 2FA. Codes via SMS can be intercepted, and there have been many cases where scammers have used duplicate SIM cards for this purpose. Now, authentication through the application can become insecure. However, it is worth hoping that Google will fix the vulnerabilities in the next updates.

An Android Trojan can steal two-factor authentication codes from Google Authenticator

Two-factor authentication (2FA) is one of the best ways to secure accounts, and Google Authenticator is perhaps the most popular application for this purpose. Unfortunately, a recent form of Android malware is capable of stealing 2FA codes from the Google app. This information is published by Threatfabric, a digital security company. According to the company, a variant of the banking Trojan Cerberus with this ability appeared in January 2020. “By exploiting access privileges, the Trojan can steal 2FA codes from the Google Authenticator app. When the application is running, the Trojan can obtain secret content and send it to its server,” the company said in a report.

Threatfabric notes that this feature of the malware has not been widely deployed yet. Potentially, such a Trojan poses a serious threat to banking services, email services, Google accounts, etc. Two-factor authentication applications such as Google Authenticator are generally considered more secure than SMS-based 2FA. Codes via SMS can be intercepted, and there have been many cases where scammers have used duplicate SIM cards for this purpose. Now, authentication through the application can become insecure. However, it is worth hoping that Google will fix the vulnerabilities in the next updates.

An Android Trojan can steal two-factor authentication codes from Google Authenticator

Two-factor authentication (2FA) is one of the best ways to secure accounts, and Google Authenticator is perhaps the most popular application for this purpose. Unfortunately, a recent form of Android malware is capable of stealing 2FA codes from the Google app. This information is published by Threatfabric, a digital security company. According to the company, a variant of the banking Trojan Cerberus with this ability appeared in January 2020. “By exploiting access privileges, the Trojan can steal 2FA codes from the Google Authenticator app. When the application is running, the Trojan can obtain secret content and send it to its server,” the company said in a report.

Threatfabric notes that this feature of the malware has not been widely deployed yet. Potentially, such a Trojan poses a serious threat to banking services, email services, Google accounts, etc. Two-factor authentication applications such as Google Authenticator are generally considered more secure than SMS-based 2FA. Codes via SMS can be intercepted, and there have been many cases where scammers have used duplicate SIM cards for this purpose. Now, authentication through the application can become insecure. However, it is worth hoping that Google will fix the vulnerabilities in the next updates.