The widely used two-factor authentication (2FA) app Google Authenticator can be hacked and allow malware perpetrators to carry out unauthorised activities remotely such as stealing information or getting app access.
Recently, security researchers at mobile threat intelligence firm ThreatFabric have found out an upgraded version of Cerberus banking Trojan running in the wild infecting devices.
This new version of android malware Cerberus can now log in and steal information from Google Authenticator.
So, if you are still using Google Authenticator, it is advised to get rid of it and find alternatives or re-setup all your 2FAs for good.
Bleeping Computer (Source)
(Image source: Cnet)