Researchers monitoring malware that affects Android devices discovered malicious apps that can steal one-time passwords (OTP) from the notification system. This development bypasses Google’s ban on apps that access SMS and call logs without justification. […]
Click here for original story, Android Malware Bypasses 2FA by Stealing One-Time Passwords
Source: Bleeping Computer