Android devices are vulnerable to a new attack that can covertly steal two-factor authentication codes, location timelines, ...
Google has only partially mitigated the attack, which involves using a malicious Android app to secretly discern the two-factor codes generated by authenticator apps.