Iranian hackers’ Android malware spies on dissidents by stealing 2FA codes
An Iranian hacking group made Android malware that appears built to spy on regime critics by stealing their two-factor codes.
The attackers first use a phishing trojan to collect login details, and then try those with the real site. If the victim has two-factor authentication turned on, the newly-reported malware intercepts the incoming SMS messages and quietly sends copies to the intruders.
Source: Iranian hackers’ Android malware spies on dissidents by stealing 2FA codes | Engadget
